Does anyone know whether this is so, or how to protect against snooping, as I would assume there is some implicit level of trust required for a network like this to stay secure.
should be based in social connections and trust.. the old school policy
cjdns works by requiring people to exchange keys with someone out of band to get access to their mesh, and to me that just seems as fundamentally defeating the purpose.
Yes, that means you need to build a system where bad guys are hard to impossible to track down and throw off the mesh. The problem is if you create a system where misbehaving people are trackable, then good guys can be tracked too.
- Non-compromised endpoint hardware - In-person public key exchange - Onion routing
Maybe if there was an open source/open hardware router which contained a chip with secure boot, into which you yourself could burn the public key, and then it would only allow the code signed by that key... Sounds too complicated to be user friendly.
Besides, there is no way to verify that the hardware router that somebody considers to be secure was not replaced by an identically looking box that had been compromised :( .