diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/MESHBAY_DESIGN.md | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/MESHBAY_DESIGN.md b/docs/MESHBAY_DESIGN.md index baef40d..4daa094 100644 --- a/docs/MESHBAY_DESIGN.md +++ b/docs/MESHBAY_DESIGN.md @@ -1819,7 +1819,10 @@ groups from a client (**NS7**). Signaling is rate-limited, SDP-size bounded, capped per user, and **the caller must share an active group with the target node**. Otherwise any authenticated user could make a third party's machine allocate peer connections on demand (**H6**). -The address in a NAT-punch request must match the caller's source address. +The NAT-punch signal shares the offer relay's gate — the caller must share an +active group with the node, checked before anything reveals whether the node is +connected, so it is no liveness oracle — and the address it names must match the +caller's own source address. **The offer ceilings bound a member and never an ordinary one** (**AV30**). They are sized against an account with twenty groups on three devices, because a |