search

yarrick / iodine

Official git repo for iodine dns tunnel
https://code.kryo.se/iodine
ISC License
6.25k stars 507 forks source link

Question about project #94

Closed bobbyl140 closed 1 year ago

bobbyl140 commented 1 year ago

Hi, If anyone sees this, I am curious if the connection password is sent encrypted or hashed in any way. I realize the actual data inside the tunnel is not, but I am worried that if the connection password is viewable, my Iodine server will get connections from other people. Thank you!

bobbyl140 commented 1 year ago

iodine uses challenge-response login secured by MD5 hash. It also filters out any packets not coming from the IP used when logging in.

Never mind, I should've read.