Skip to content

Commit

Permalink
f add note about user enumeration
Browse files Browse the repository at this point in the history
  • Loading branch information
TheBlueMatt committed Feb 12, 2024
1 parent 05abc54 commit 83c1343
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions bip-XXXX.mediawiki
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,10 @@ However, for the best privacy, payers are encouraged to perform DNS resolution o

Lightning payers should consider utilizing DNS resolution over native onion messages, using the protocol described in [[BLIP 32|https://github.com/lightning/blips/blob/master/blip-0032.md]]

=== DNS Enumeration ===

In most cases where payments are accepted from any third-party, user enumeration is practical by simply attempting to send small value payments to a list of possible user names. However, storing all valid users in the DNS directly may make such enumeration marginally more practical. Thus, those wishing to avoid such enumeration should carefully ensure all DNS names return valid payment instructions. Note when doing so that wildcard records are identified as such by the DNSSEC RRSIG labels counter and are differentiable from non-wildcard records.

== Examples ==

`matt@mattcorallo.com` resolves to
Expand Down

0 comments on commit 83c1343

Please sign in to comment.