Bitcointalk · Hostnames instead of IP Addresses

中本聪,2010 年 6 月 2 日

SN-0670 已核对来源,附原文与上下文。

阅读语言
中文译文

现在的按 IP 发送没什么用:它连接到那个 IP,所以你为了匿名想用 TOR,可那样它就完全可能被窃听、被中间人攻击。

未来按 IP 发送的计划是做成比特币地址加 IP 的形式,比如:

1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h1.2.3.4 或 1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4hdomain.com

我需要分隔符字符的建议。":" 是个候选,但 IPv6 里也有 :,可能造成混淆。最好是 url 参数里允许的字符。

我想用 SSL 做连接,用比特币地址的公钥作为证书。这样你就能确定自己连上的正是你想要的对方,并且安全加密。比特币地址不用于交易,只用于认证。一个新生成的比特币地址会通过 SSL 连接发来。

既然经过了认证,允许 IP 地址是域名就安全了。需要留意的是:如果用了代理,要用 socks4a 而不是 DNS 查询。

ORIGINAL · 英文原文
The current sending by IP is not very useful: it connects to the IP, so you'd like to use TOR for anonymity, but then it can totally be eavesdropped and man-in-the-middled.

The future plan for sending to an IP is to make it a bitcoin address plus IP, like:

1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<someseparatorcharacter>1.2.3.4
or
1auaDZCFYqaGx4FKS5WenNfurk2SkoDu4h<someseparatorcharacter>domain.com

I need suggestions for the separator character.  ":" is a candidate, but IPv6 has : in it and that might get confusing.  Something that's allowed in url parameters would be nice.

I want to use SSL for the connection, using the bitcoin address' public key as the cert.  You would be certain you're connected to who you thought, and safely encrypted.  The bitcoin address would not be used for the transaction, only for authentication.  A new generated bitcoin address would be sent through the SSL connection.

Since it's authenticated, it would then be safe to allow the IP address to be a domain name.  Some care taken that if a proxy is used, it uses socks4a instead of DNS lookup.
来源
Bitcointalk 原始链接 ↗ 记录编号 SN-0670