Skip to content

docs: for dial without peer#707

Open
laciferin2024 wants to merge 2 commits intolibp2p:masterfrom
ideo-org:docs/dial-without-peer-id
Open

docs: for dial without peer#707
laciferin2024 wants to merge 2 commits intolibp2p:masterfrom
ideo-org:docs/dial-without-peer-id

Conversation

@laciferin2024
Copy link

Adds a new section to the connection establishment spec documenting the security properties of dialing a multiaddr without a /p2p/ component.

Covers:

  • Security implications (MITM vulnerability when peer ID is not verified)
  • Acceptable use cases (app-level auth, DNSSEC+peer discovery, trusted overlays)
  • Implementation guidance for exposing this safely

Closes #458

Author background
I am a PLDG member and have operated private IPFS clusters for enterprise AI and data compute for the past two years, with a focus on secure connection establishment, gateway exposure, and availability in production settings.

laciferin2024 and others added 2 commits March 15, 2026 22:38
Adds a new section to the connection establishment spec covering the security implications, acceptable use cases, and implementation guidance for dialing a multiaddr without a /p2p/<peer-id> component. Addresses libp2p#458.
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Triage

Development

Successfully merging this pull request may close these issues.

Document dialing peer without their peer ID

1 participant