Bitcoin Core Debates Deprecating CJDNS Support Amid Security Concerns
Bitcoin Core contributors are currently evaluating the future of CJDNS, an optional peer-to-peer transport and address handling feature. The discussion has been sparked by concerns over the health of the CJDNS network, which has shown a significant decline in usable nodes. Andrew Chow, a Bitcoin Core member, highlighted that a recent seeder database identified only seven out of 25 CJDNS addresses as reliable, raising alarms about the potential for eclipse attacks.
The issue, documented as #36041, questions whether Bitcoin Core should maintain CJDNS address handling as a backup option, given the thin pool of peers. The low number of effective nodes makes it easier for attackers to isolate a CJDNS-only node, potentially leading to security vulnerabilities. The current debate includes suggestions for a warning to users in the upcoming 32.x release before any removal in version 33.x.
Despite the low numbers, the global CJDNS population may still be larger than reported, as the figures reflect only one crawler's database. The ongoing discussion emphasizes the need for a reliable backup network, especially as Bitcoin Core currently discourages CJDNS-only operation due to the risk of insufficient outbound connections.
As the conversation continues, Bitcoin Core maintains that CJDNS support remains active, but the future of this feature hangs in the balance as developers weigh the risks against the benefits.
FAQ
What is CJDNS?
CJDNS is an optional peer-to-peer transport and address handling feature used in Bitcoin Core that allows for secure communication over a distributed network.
Why is Bitcoin Core considering deprecating CJDNS support?
The consideration to deprecate CJDNS support stems from security concerns, particularly the decline in usable nodes and the risk of eclipse attacks due to a thin pool of peers.
What are eclipse attacks?
Eclipse attacks occur when an attacker isolates a node from the rest of the network, allowing them to control the information that the isolated node receives, potentially leading to security vulnerabilities.
What is the current status of CJDNS support in Bitcoin Core?
As of now, Bitcoin Core maintains that CJDNS support is still active, but there is an ongoing debate among contributors about its future due to the associated risks.
Will users be notified before any changes to CJDNS support?
Yes, there are suggestions for a warning to be included in the upcoming 32.x release before any potential removal of CJDNS support in version 33.x.
Comments
Comments are moderated before publish.
No comments yet — be the first.