原始文献 / 论坛帖 / Re: Hostnames instead of IP Addresses
Re: Hostnames instead of IP Addresses
Bitcointalk · 2010-06-02 18:18:15 UTC
现在的 IP 发送不太实用：它直连 IP，所以你想用 TOR 匿名，但那样就会被全程窃听和中间人。
将来给 IP 发送的计划是做成比特币地址加 IP，像这样：
1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<someseparatorcharacter>1.2.3.4
或
1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<someseparatorcharacter>domain.com
分隔符用什么，我需要建议。":" 是个候选，但 IPv6 里有 :，可能会混淆。最好是 url 参数里允许的字符。
我想用 SSL 建连接，用比特币地址的公钥做证书。你就能确定连到的是你以为的那个人，而且加密安全。比特币地址不用于交易，只用于认证。一个新生成的比特币地址会通过这条 SSL 连接发过去。
既然认证了，那 IP 地址用域名也就安全了。要注意的是，如果用了代理，得让它用 socks4a 而不是 DNS 解析。
英文原文
The current sending by IP is not very useful: it connects to the IP, so you'd like to use TOR for anonymity, but then it can totally be eavesdropped and man-in-the-middled.
The future plan for sending to an IP is to make it a bitcoin address plus IP, like:
1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<someseparatorcharacter>1.2.3.4
or
1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<someseparatorcharacter>domain.com
I need suggestions for the separator character. ":" is a candidate, but IPv6 has : in it and that might get confusing. Something that's allowed in url parameters would be nice.
I want to use SSL for the connection, using the bitcoin address' public key as the cert. You would be certain you're connected to who you thought, and safely encrypted. The bitcoin address would not be used for the transaction, only for authentication. A new generated bitcoin address would be sent through the SSL connection.
Since it's authenticated, it would then be safe to allow the IP address to be a domain name. Some care taken that if a proxy is used, it uses socks4a instead of DNS lookup.