Advertise signed peer cards on LAN

This commit is contained in:
Eric Wendland 2026-05-18 17:05:43 +02:00
commit d5a548182b
10 changed files with 306 additions and 7 deletions

View file

@ -126,6 +126,9 @@ imported peer card and exchange a signed candidate-only peer-card ping.
Iroh control request: the remote daemon verifies that the caller's signed peer
card binds the actual Iroh EndpointID before reducing resource-local auth ops.
Importing or pinging a peer card never grants capabilities by itself.
When `[iroh].local_discovery = true`, the daemon also advertises and discovers
signed peer cards on LAN using a geth-specific mDNS TXT payload. That payload is
candidate metadata only; all geth node-to-node requests still run over Iroh.
Other command groups exist as explicit stubs: `ssh proxy`.