phoenix icon indicating copy to clipboard operation
phoenix copied to clipboard

Don't require TLS connection when connecting to localhost or onion addresses

Open Kixunil opened this issue 5 years ago • 7 comments

When an address matching regex ^(localhost|127.0.0.1|.*\.onion)(:[1-9][0-9]*)?$ is entered, show a checkbox "Disable TLS", as the encryption might not be needed.

This is useful for example when one sets up an SSH tunnel using ConnectBot.

Kixunil avatar Dec 13 '19 18:12 Kixunil

the required change can be done here: https://github.com/ACINQ/phoenix/blob/3ed8cae1f32d89e44a00236792e3e92a311c7b9d/app/src/main/java/fr/acinq/phoenix/lnurl/LNUrl.kt#L67

tomichec avatar Sep 28 '20 16:09 tomichec

That looks like LNURL, I was talking about connecting to a custom node.

Kixunil avatar Sep 30 '20 19:09 Kixunil

Hi, from v1.3.2 you can disable/enable TLS when connecting to an onion electrum server (it's disabled by default) so this issue is half fixed. What needs to be done is to add the same behaviour for localhost|127.0.0.1 addresses.

dpad85 avatar Oct 01 '20 10:10 dpad85

It would also be useful to have this behavior for lnurl.

tomichec avatar Oct 04 '20 22:10 tomichec

Please allow connecting to non-ssl electrum nodes. There are setups when it is completely unnecessary or even impossible to fulfill this requirement. I'm using Electrum server in private network behind VPN and it is very hard to generate ssl cert for publicly unreachable machines.

slush0 avatar Jan 13 '21 18:01 slush0

It would also be useful to have this behavior for lnurl.

For onion only, I don't believe LNURL is useful for localhost queries.

@slush0 good point about VPN, that'd be hard to check correctly as I suggested. Maybe allow it with big fat warning?

Kixunil avatar Jan 13 '21 19:01 Kixunil

Any progress on this? Custom servers to require SSL is really limiting. Please allow to skip this requirement.

slush0 avatar Mar 02 '23 19:03 slush0