Interesting discussion.
This reminded me of a tweet from Adam Back a few weeks ago, regarding the first BTC transaction to Hal Finney:
https://twitter.com/adam3us/status/1087013943330172930Probably best to disable receiving by IP unless you specifically intend to use it. This is a lot of surface area that nobody uses that doesn't need to be open by default.
In storefront cases, you would typically only want customers to send payments through your automated system that only hands out bitcoin addresses associated with particular orders and accounts. Random unidentified payments volunteered to the server's IP address would be unhelpful.
In general, sending by IP has limited useful cases. If connecting directly without a proxy, the man-in-the-middle risk may be tolerable, but no privacy. If you use a privacy proxy, man-in-the-middle risk is unacceptably high. If we went to all the work of implementing SSL, only large storefronts usually go to the trouble of getting a CA cert, but most of those cases would still be better off to use bitcoin addresses.
because the IP feature was just about a different way to get a bitcoin address from someone, it was not a big NEEDED thing. but opened up nodes to trojans, viruses hackers, man in middle, and ofcourse DDoS attacks so benefit vs problems.. weighed more into the problems direction. so was disabled
anyway moving onto to adam back...
dang.. seems like adamback has no clue
1. there actually was an address that satoshi sent the funds to hal
1Q2TWHE3GMdB6BZKafqwxXtWAWgFt5Jvm3
2. a TCPIP connection payment is just a standard bitcoin payment. seems he dosnt know the basics yet CEO's a company of dozens of developers..
then. in the replies section. he then reveals the issues of connecting to ip addresses to request data... and if you read it and then look at his companies invention known as LN . it, yep LN has that same fatal flaw.
https://twitter.com/adam3us/status/1087151635510583296"It's not very good:
- recipient has to be online (vs send to address recipient offline)
- IP address could change (many ISPs dynamic IP)
- recipient could have firewall or NAT (unreachable)
- TCP hijack could send funds to someone else (intercept/reroute)
- as no authentication"