Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bLIP-0028: Paratonnerre #28

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from
Draft

Conversation

t-bast
Copy link
Contributor

@t-bast t-bast commented Sep 5, 2023

Paratonnerre is a protocol to safely control a remote lightning node from an untrusted application using a secure hardware device.

Paratonnerre is a protocol to safely control a remote lightning node from
an untrusted application using a secure hardware device.
@t-bast t-bast changed the title Introduce Paratonnerre bLIP-0028: Paratonnerre Sep 5, 2023
@rustyrussell
Copy link

Hmm, like a reduced-subset commando! (Yay, no JSON!).

Types are 16 bit, so your numbers don't work?

I prefer bearer tokens (runes/macaroons) but that does require more setup, so simple nodeid auth makes sense.

Will review in more depth later...

@t-bast
Copy link
Contributor Author

t-bast commented Sep 8, 2023

The actual commands definitely need more work, I probably need to spend a bit more time on them (and implement that in eclair to make sure nothing odd comes out).

The goal is really to only use this tool for commands that involve spending some bitcoin, because that's what you really want to secure as much as possible. All the "read" commands (listing channels, getting information about your node status) don't make sense here in my opinion (no need for HSM security for that), but we may still want to add them as optional commands at some point.

I'm not sure yet what would be best for "feature negotiation" (agreeing on which commands a specific node_id is allowed to send), it looks like this could simply be configured on the lightning node side and exchanged during init, but may be worth thinking about.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants