nix-bitcoin should use acme for SSL certificates about nix-bitcoin

[nixbitcoin]

Our current setup creates self-signed certificates merely for the purpose of allowing Tor hidden service connections from Electrum Android, which forces the use of TLS. We are planning to deprecate the whole TLSProxy with Electrum 4.0.

Are you using ACME to create letsencrypt certs with which you can connect to electrs over clearnet?

[reardencode]

Ah, I see why you're using self-signed. Seems like both modes should be supported. I'm not interested in using tor, but I know most users don't have existing publicly visible server infrastructure and domains.

…

--Brandon, sent by an android

-----Original Message----- From: nixbitcoindev <[email protected]> To: fort-nix/nix-bitcoin <[email protected]> Cc: Brandon Black <[email protected]>, Author <[email protected]> Sent: Thu, 28 May 2020 4:27 Subject: Re: [fort-nix/nix-bitcoin] nix-bitcoin should use acme for SSL certificates (#182) Our current setup creates self-signed certificates merely for the purpose of allowing Tor hidden service connections from Electrum Android, which forces the use of TLS. We are planning to deprecate the whole TLSProxy with Electrum 4.0. Are you using ACME to create letsencrypt certs with which you can connect to electrs over clearnet?

-- You are receiving this because you authored the thread. Reply to this email directly or view it on GitHub: #182 (comment)

[nixbitcoin]

From the very beginning we wanted nix-bitcoin to protect its users privacy to the greatest extent possible. Among the measures to guarantee that was exclusively networking over Tor. Now that the project has also become interesting for businesses and infrastructure providers, I don't think we'll get around implementing an off-by-default clearnet switch.

Another interesting approach is better documenting a Wireguard routed setup, with a clearnet gateway on a public server. That way users and businesses can enjoy the speed and accessibility of clearnet, without revealing the IP address of their precious nix-bitcoin node.