From 9f7f2ff38633db53c69c61c65332f27d96aed6c8 Mon Sep 17 00:00:00 2001 From: Mikerah Date: Tue, 10 Mar 2020 15:19:27 -0400 Subject: [PATCH] Basics of analyzing privacy of libp2p --- 030-privacy-libp2p.md | 57 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) create mode 100644 030-privacy-libp2p.md diff --git a/030-privacy-libp2p.md b/030-privacy-libp2p.md new file mode 100644 index 0000000..04b183a --- /dev/null +++ b/030-privacy-libp2p.md @@ -0,0 +1,57 @@ +# Analysis of Privacy and Anonymity guarantees of libp2p + +## Motivation and context + + + +Libp2p provides a set of libraries and modules for building peer-to-peer networks. As privacy is getting more important, projects using libp2p may want to extend its functionality by providing transports to well-known anonymity networks or build their own. In order to effectively do this, we need to understand the privacy and anonymity guarantees of the current libp2p stack and see how they can be rectified, and how to offer features that offer minimal privacy and anonymity to libp2p users. + +## Value + + + +Without providing libp2p users with a clear understanding of the privacy and anonymity guarantees of the system, they can be under the false impression that libp2p provides privacy and anonymity. Further, for those that do understand the ramifications, they may end up needing to implement privacy and anonymity and this increases the amount of work needed for those projects. + +### Benefits (if addressed) + + +Knowing explicit what kind of privacy and anonymity guarantees libp2p provides gives projects a better overall view of whether libp2p fits their needs. Further, it'll give the libp2p community the opportunity to find solutions for better building private, p2p networks. + +### Risks (if not addressed) + + + +Usually, adding private or anonymous features by default into a system tends to reduce the scalability of said system and tends to not be backwards compatible, i.e. once already deploy previous users of the systems do not get to take advantage of the new privacy features. Another issue with adding private features by default is the increase risk of sybil attacks and increased susceptibility to DoS attacks. + +## Expected output and constraints + + + +- The expected output is a document that outlines the ways in which libp2p doesn't provide privacy and anonymity, along with a set of recommendations on how to improve this for libp2p users. + +- The document should outline the pros and cons with respect to adding privacy features to libp2p by default and the potential ramification for existing networks (IPFS, Eth2.0, Polkadot, etc) + +## Relevant discussion + + + +## Design/implementation notes + + + +## Potential funders + +