During the Core Dev Call 32 it was brought up the possibility to maliciously trigger rpc calls to the eth node when @mentions are resolved from the ENS. Potentially this can be abused if the lookup is not cashed and bounded, for example for DOS amplification on the eth node or to trigger node blacklisting on infuras end.
- Options 1: peer side rate limit for ENS lookups
- Option 2: Limit ENS resolution for mentions the peer has in its contact list (is this done already @cammellos ?)
- Option 3: ...
During the Core Dev Call 32 it was brought up the possibility to maliciously trigger rpc calls to the eth node when @mentions are resolved from the ENS. Potentially this can be abused if the lookup is not cashed and bounded, for example for DOS amplification on the eth node or to trigger node blacklisting on infuras end.