Viewing profile — matheus23

You need to know the public key you communicate with ahead of connecting to the correct relay. It needs to be shared securely out-of-band, relays don't help with that.

Somewhat easy, unfortunately. If you look at Wireguard traffic, you'll see a .iroh.invalid SNI in the QUIC Initial packet. Encrypted ClientHello can fix that, but support hasn't sh…

We keep thinking about ways to combine iroh + zeroMQ! I think these two could compose. (Not familiar with nanomsg myself) About tailscale: It's similar, but iroh is not a VPN, so i…

The secret is that iroh still uses IPs under the hood :) But with QUIC, your connections aren't bound to your four-tuple, your connection can migrate from e.g. WiFi to Cellular wit…

There were experiments :) https://github.com/dignifiedquire/nquinn The cool thing about noq (and Quinn, where we inherited this from), is that you can implement your own "Session" …

The TLS authentication story is fully configurable. This hasn't changed compared to Quinn. We use noq in iroh, and in iroh we use raw public keys (RFC7250). When you use iroh, you …

noq doesn't implement any relaying logic itself. From the perspective of noq, iroh relays are another IP subnet that it's sending packets to and receives packets from, so just anot…