[messaging] RFC: async NaCl relay

[U.Mutlu]

Thx.
How did you solve the problem of a new relay joining the network?
I guess it must be announced to the other relays.
Does each relay need to know all the other relays?
Is a central instance needed for collecting/managing/distributing
or making available the relay-list?
Is the user bound to a specific relay (his "home" relay)?


Max Skibinsky wrote on 12/18/2015 09:37 PM:
>     But it should be done so that even when a relay node gets operated
>     by the enemy, the user data should still be secure/protected.
>
> ​Thank you Mutlu. That is how relay is designed: traffic is p2p encrypted
> between endpoints, and these opaque blobs are transmitted to/from relay inside
> a separate session using different nacl keys (see 3.3.2
> in the spec for details). ​Adversary taking over relay can get the meta
> (which is fairly easy to obscure with fake messages to non-existent HPKs) but
> not communication contents between endpoints.