{"action":"created","issue":{"url":"https://api.github.com/repos/weaveworks/weave/issues/2026","repository_url":"https://api.github.com/repos/weaveworks/weave","labels_url":"https://api.github.com/repos/weaveworks/weave/issues/2026/labels{/name}","comments_url":"https://api.github.com/repos/weaveworks/weave/issues/2026/comments","events_url":"https://api.github.com/repos/weaveworks/weave/issues/2026/events","html_url":"https://github.com/weaveworks/weave/issues/2026","id":139017442,"number":2026,"title":"Built-in end-to-end encryption","user":{"login":"sheerun","id":292365,"avatar_url":"https://avatars.githubusercontent.com/u/292365?v=3","gravatar_id":"","url":"https://api.github.com/users/sheerun","html_url":"https://github.com/sheerun","followers_url":"https://api.github.com/users/sheerun/followers","following_url":"https://api.github.com/users/sheerun/following{/other_user}","gists_url":"https://api.github.com/users/sheerun/gists{/gist_id}","starred_url":"https://api.github.com/users/sheerun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sheerun/subscriptions","organizations_url":"https://api.github.com/users/sheerun/orgs","repos_url":"https://api.github.com/users/sheerun/repos","events_url":"https://api.github.com/users/sheerun/events{/privacy}","received_events_url":"https://api.github.com/users/sheerun/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-03-07T16:07:24Z","updated_at":"2016-03-10T11:13:22Z","closed_at":null,"body":"Hey,\r\n\r\nI imagine public mesh network created from servers and desktops running weave, but I see one issue: encryption and man-in-the-middle attacks.\r\n\r\nCurrently weave only allows network-level encryption with one password, but in case of public network it is meaningless, because everyone knows the password.\r\n\r\nOne possible solution is for to implement asymmetric encryption capabilities into the weave daemon, so all data is encrypted with with per-host public keys propagated through the network.\r\n\r\nWould it be possible for weave team to implement such \"end-to-end\" mode for weave? I see a great potential in this featue.\r\n\r\nAs a bonus it would allow for encrypted handshake as every host has its public/private key to use."},"comment":{"url":"https://api.github.com/repos/weaveworks/weave/issues/comments/194795186","html_url":"https://github.com/weaveworks/weave/issues/2026#issuecomment-194795186","issue_url":"https://api.github.com/repos/weaveworks/weave/issues/2026","id":194795186,"user":{"login":"sheerun","id":292365,"avatar_url":"https://avatars.githubusercontent.com/u/292365?v=3","gravatar_id":"","url":"https://api.github.com/users/sheerun","html_url":"https://github.com/sheerun","followers_url":"https://api.github.com/users/sheerun/followers","following_url":"https://api.github.com/users/sheerun/following{/other_user}","gists_url":"https://api.github.com/users/sheerun/gists{/gist_id}","starred_url":"https://api.github.com/users/sheerun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sheerun/subscriptions","organizations_url":"https://api.github.com/users/sheerun/orgs","repos_url":"https://api.github.com/users/sheerun/repos","events_url":"https://api.github.com/users/sheerun/events{/privacy}","received_events_url":"https://api.github.com/users/sheerun/received_events","type":"User","site_admin":false},"created_at":"2016-03-10T11:13:22Z","updated_at":"2016-03-10T11:13:22Z","body":"A base for P2P services that could run network with full end-to-end encryption by default.\r\n\r\nThere are many attempts to do so: https://github.com/redecentralize/alternative-internet\r\n\r\nWeave is remarkably simple to setup, though. And it supports DNS by default."}}