blips icon indicating copy to clipboard operation
blips copied to clipboard

bLIP-0028: Paratonnerre

Open t-bast opened this issue 2 years ago • 2 comments

Paratonnerre is a protocol to safely control a remote lightning node from an untrusted application using a secure hardware device.

t-bast avatar Sep 05 '23 21:09 t-bast

Hmm, like a reduced-subset commando! (Yay, no JSON!).

Types are 16 bit, so your numbers don't work?

I prefer bearer tokens (runes/macaroons) but that does require more setup, so simple nodeid auth makes sense.

Will review in more depth later...

rustyrussell avatar Sep 07 '23 21:09 rustyrussell

The actual commands definitely need more work, I probably need to spend a bit more time on them (and implement that in eclair to make sure nothing odd comes out).

The goal is really to only use this tool for commands that involve spending some bitcoin, because that's what you really want to secure as much as possible. All the "read" commands (listing channels, getting information about your node status) don't make sense here in my opinion (no need for HSM security for that), but we may still want to add them as optional commands at some point.

I'm not sure yet what would be best for "feature negotiation" (agreeing on which commands a specific node_id is allowed to send), it looks like this could simply be configured on the lightning node side and exchanged during init, but may be worth thinking about.

t-bast avatar Sep 08 '23 02:09 t-bast