3 ms·
Bitmessage is mostly used for "chans" and they are insecure. Basically, when you send a message to chan, everyone who knows about this chan can decrypt the mess
by ycmbntrthrwaway 10y ago
Bitmessage is mostly used for "chans" and they are insecure. Basically, when you send a message to chan, everyone who knows about this chan can decrypt the message. So the message is essentially not encrypted.
Streams are not implemented, so bitmessage does no scale.
As you can request a list of neighbors from anyone you can easily attack network by constantly reconnecting closer to the message sources. For example, you can track down all active users of some particular chan.
Freenet project did a lot of work to protect against opennet attacks, and bitmessage completely ignores it.
- LeoPanthera 10y agoWell, the name of the chan is the key, so assuming you use a relatively strong password-style name and then keep that name secure, the chan will also be secure.
- CyberDildonics 10y agoIsn't the point more about concealing who is sending the message in the first place?
- ycmbntrthrwaway 10y agoBitmessage is essentially a floodfill algorithm. You just need to request neighbor list from your neighbor which delivered the message to you before others. Then, you connect to them and you are one step closer to the sender. Repeat it until you are connected to the original sender and all its neighbors. So Bitmessage does not protect you if you use the same sender identity multiple times.