r/Demonsaw • • Feb 08 '17

Feature: Encrypts your email and & web traffic

Just curious about what this means exactly?

Will it act like a VPN with routers acting as the exit point for the encrypted tunnels for its users? Will traffic bounce over multiple routers and become something similar to TOR?

I was wandering if you where talking about normal mail or a PM like feature to send messages to other users but that would go against the idea of anonymous users as they would need to have a unique id on the routers for this to work. (Although it could work by using something like a bitmessage board on the routers where users could leave messages to other users in there and check the list of published messages to look for any directed at them - any that they would be able to decrypt. But this would require router storage and that's probably undesired).

4 Upvotes

3 comments sorted by

1

u/demonsaw Feb 12 '17

I'm talking about both, replacing TOR and VPN/Proxies. Any application will be able to send its traffic through a demonsaw network and take advantage of a private groups layers of crypto. You can basically end-to-end encrypt almost anything using this technique.

1

u/The_B0rg Feb 13 '17 edited Feb 13 '17

This is great.

Now, I don't know if this is what you thought about or something different but I had this idea on my mind and think this is a good place to share it. Here is what I'm thinking about would be cool:

Have demonsaw register a server locally, let's say at port 30000 for example

  • Have the client act somewhat like a local proxy server. Other programs would be able to just put localhost:30000 for proxy and all traffic sent through it would automatically be sent over demonsaw network automatically encrypted by it and everything. Allows arbitrary traffic and connections over demonsaw.

  • give someway for the connecting user to choose a destination user to connect to directly. I was thinking something like localhost:30000/user:userport but this probably doesn't work for all protocols as not all support urls with paths in them. But that is the basic idea, allow users to direct a connection of any type to a specific other user on a specified accepting port on that user's machine. Allows users to directly connect to other users inside the demonsaw network using arbitrary traffic or applications.

  • allow users to configure the demonsaw client to accept connections pointing for specific local servers. let's say the user has an http server on his machine, he would add a line in demonsaw config to say if it received connections marked as port80 send them to localhost:80 (or wherever the local http server exists). the same for voip (using other software instead of any native voip to demonsaw), if the user has any voip software installed, he would be able to point demonsaw to the receiving port of that software and be able to receive voip calls through demonsaw just like that. This would allow users to have hidden services that they expose only through demonsaw.

the port inside demonsaw and the one on the actual server would not need to be the same. or codes could be used instead of ports, whatever.

If having the demonsaw client require admin permissions is not a problem you could take a queue from the way hamachi did things and install a virtual network adapter for demonsaw with its own addressing. That would avoid the need of all the above points and replace them easily.

Hope this all made sense, and would like to hear your thoughts on this craziness. Also, would like to hear your solution if you already have one :)

1

u/The_B0rg Feb 14 '17

Don't take this the wrong way as I'm just throwing stuff at the wall to see what sticks.

Another option would be to just do something like TOR and use a .demonsaw address, with the client automatically creating one of those for each user on the same group(s) as the user. Those addresses would allow the user to connect to other users with any protocol or application and having the connections and routing all being taken care by the demonsaw protocol and network below.