Security & Privacy implications of using the Global Discovery Servers, i.e. for Zero Days

[Nummer378 (Max)]

I wrote about the overall attack surface for discovery & relay a while ago:

What could a malicious discovery or relay server do?

The certificate isn’t really “private”. It can be seen by anyone listening on the wire and contains a public key. Though in general your assessment is correct. I’m assuming you’re referring to the relay servers here. The discovery servers syncthing uses by default are run only by the Syncthing Foundation (they can be changed to self-hosted ones in the settings). The obvious and realistic attack for both malicious discovery server and relay servers is denial of service: A relay server can re…

Does that answer your question?