Remove the addressbook

Discuss the I2P addressbook and naming system
Post Reply
someono
Posts: 1
Joined: 18 May 2023 10:15

Remove the addressbook

Post by someono »

I think the addressbook should be removed.
1. If using subscription, that's a centralized point of failure you need to trust before accessing any eepsite. The subscription owner could change any website's record to point to a server they control at any point, so that's a major vulnerability.
2. When someone shares a .i2p domain, there is no guaranty it will direct to the same site for two different users.
3. If not using subscriptions, when someone shares a .i2p domain, you need to trust a jump services at least once. That isn't too bad, but an unnecessary step.
4. In many cases, people ONLY share the .i2p, so the addressbook isn't really optional at the moment. The existence of the addressbook encourages this bad (imo) habit.
5. The addressbook is unnecessary. On Tor, there is no "DNS", people share long .onion addresses and it works just fine. Human-readable/memorable hostnames aren't necessary when every browser has bookmarks.
User avatar
lgillis
Posts: 223
Joined: 20 Oct 2018 12:52
Contact:

Re: Remove the addressbook

Post by lgillis »

Since you’re already challenging the existing convention in your first post on this forum, it would certainly have been helpful to cite the relevant sources. That’s usually the best way to demonstrate your level of knowledge. I also think it’s appropriate if you want to encourage other participants to join this discussion. After all, the address book affects everyone here.
Anarchie ist der „Zustand der Sklaven ohne Herren“. (Platon, Aristoteles)
User avatar
FreefallHeavens
Posts: 17
Joined: 18 Mar 2023 12:17

Re: Remove the addressbook

Post by FreefallHeavens »

The addressbook is simply a convenience default, much like the popular eepsites provided in the router console page, the default I2PSnark trackers and the update URL and the public keys for signed news/version updates. If you don't like or trust them, you can remove all of them. Theoretically every one of these could be a centralized weakness. Even participating in traffic could be. You are able to configure these in the router console UI and be as zero-trust and incognito as you wish. If you hate a feature, disable it.

Your point about people only sharing .i2p is a community culture issue, not router. People can and sometimes do share full b32 addresses. Most simply choose to share the addressbook-resolved name.
Post Reply