-
vtnerd
moneromooo , others ? : should an unrestricted monero-daemon rpc list all txes, even those in the stem phase?
-
vtnerd
currently thats the blocker for the test, and my only hack left is running multiple daemons in the functional test (txpool in particular) to simulate stem->fluff
-
vtnerd
that test arguably should be added anyway
-
moneromooo
vtnerd: I'd say all of them.
-
binaryFate
Anyone has experience about the Chinese firewall wrt. Hong-Kong IPs?
monero-project/monero #6422
-
vtnerd
hmm, so if multiple wallet owners are accessing a single unrestricted rpc, is that considered a misconfiguration?
-
vtnerd
I suppose it is, but it would be nice if things could automagically do what every daemon/wallet owner expects/wants. unrealistic I guess
-
moneromooo
That should work fine. The functional tests do that.
-
vtnerd
do what?
-
moneromooo
Accessing a single unrestricted (daemon) RPC from multiple wallets.
-
moneromooo
I think I did not get your point.
-
vtnerd
I meant if an unrestricted rpc returns txes in the stem phase, someone who is accessing a friends daemon via an unrestricted rpc can "see" their friends txes and vice-versa
-
vtnerd
its very brief mind you, and arguably is less of a concern since most open relays _should_ be restricted
-
moneromooo
Well, that's the point of restricted. It currently does that with local rpc txes AFAIK.
-
vtnerd
thats what I mean, I'm probably trying to hard to ensure the daemon is setup as the user intends, but that is always going to be impossible to some extent
-
vtnerd
plus if the advice is always "run your own node for privacy", it cuts down most of this stuff
-
moneromooo
If you're worried someone might set unrestricted access by mistake, they'll find out soon since their computer wlil be mining for whoever finds it.
-
vtnerd
yeah good point
-
vtnerd
Ill issue a separate PR to fix this issue, with the dandelion++ as the first commit in the PR. the changes are worth a separate PR to verify
-
vtnerd
at least that way we can verify the tests are "green", and then have an immediate fix already in the PR queue
-
moneromooo
Did you not add a "confirm bind to external" error by default anyway ?
-
moneromooo
Ah, it does not mention --restricted-rpc. Maybe it should.
-
vtnerd
yeah it warns by default if listening to external connections
-
vtnerd
yeah I'll add that in the PR then