On Mon, Mar 04, 2013 at 11:59:07AM +0100, folkert wrote: > > * The LocalDiscovery option now makes use of all addresses tinc is bound > > to. > > Do the systems that see each other in the local lan, do they all need to > have each others public keys in hosts/ ? Or is it possible to let them > ask some trusted central authoritie(s) if the detected host is kosher?
No, local discovery makes use of the sames keys that have been exchanged for
direct UDP communication. So you don't need the public keys of all other
nodes, and it is not possible to spoof local discovery packets.
--
Met vriendelijke groet / with kind regards,
Guus Sliepen <[email protected]>
signature.asc
Description: Digital signature
_______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
