Are bitmessages using non-default ports a security threat? about orisi

[83tb]

I think being able to list of BitMessage nodes IPs is security treat itself, the ports does not matter that much.

Even if we run on a standard port someone can look for patterns in the communication behaviour.

That's probably where Tor should come in.

As far as Docker and Vagrant are concerned you can force the host to use "standard" port, you can even distribute ip addresses from your host machine to Bitmessage nodes, and give each one a standard ip and a standard port. Another solution would be for all Docker/Instances to use the same incoming port on the host machine.

[kolinko]

nvm. we can probably connect to bitmessage / bitcoind in a passive mode. it can still reveal our nodes, if very few bitmessage nodes use passive modes, but not as easily.