Matthew Toseland skrev: >> If opennet nodes are a reliable source of IP detection, aren't they preferred to connecting to third-party JSTUN servers? (not that I think JSTUN in general is a security issue, but if we can get the same information from other users...) > > Not if we are on pure darknet, no.
(I meant for opennet nodes) >>> OTOH I think the current wizard text is reasonable: >>> >>> Plugins >>> >>> Plugins are optional extensions to Freenet that enhance it in some way. Some of them may have security issues for some users, see below. >>> >>> Enable Universal Plug and Play (UPnP). Set this if you have a router on your local Network. Don't set it if you are directly connected to your ISP e.g. via dial-up modem, or have untrusted people on your local network. >>> >>> Enable automatic IP address detection via JSTUN. Uses central servers (also used by e.g. internet telephone programs) to find out your IP address. Turn off if you are concerned about this. >> I think that is much better than what used to be there. I still think a short explanation of why Freenet needs the IP address would be a good idea. > > Suggested text? Hmm. IMHO, usability-wise, this would be ideal: Opennet enabled: Ask opennet peers / seednodes / whatever. Don't use the plugins for IP detection (and thereby no need to ask about them either). Opennet disabled: UPnP and JSTUN default to enabled / disabled depending on security level. If we are peerless with a LAN ip and no address detection plugins enabled (or they failed) when the user requests his darknet reference (and perhaps if node cannot connect to any darknet peers for a while), put a warning box with something like the following on the ref page: "In order to craft your node reference used to connect with other Freenet nodes, Freenet needs to know your public IP address. Freenet has detected that you are behind a router or a proxy server that hides your public IP address from this computer. As you are not connected to opennet, Freenet will need to find your address through other means. Please choose which methods you would like Freenet to use to try to find your public IP address: <checkbox> I already know my public IP address: <text field> <checkbox> Allow detection via Universal Plug and Play (UPnP) <UPnP description above> <checkbox> Allow detection via JSTUN <JSTUN description above>" Am I missing any scenarios that way? - Zero3 _______________________________________________ Devl mailing list [email protected] http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
