git / moonbite-core / doc/dnsseed-policy.md · raw

Expectations for DNS Seed operators====================================Litecoin Core attempts to minimize the level of trust in DNS seeds,but DNS seeds still pose a small amount of risk for the network.As such, DNS seeds must be run by entities which have some minimumlevel of trust within the Litecoin community.Other implementations of Litecoin software may also use the sameseeds and may be more exposed. In light of this exposure, thisdocument establishes some basic expectations for operating dnsseeds.0. A DNS seed operating organization or person is expected to follow goodhost security practices, maintain control of applicable infrastructure,and not sell or transfer control of the DNS seed. Any hosting servicescontracted by the operator are equally expected to uphold these expectations.1. The DNS seed results must consist exclusively of fairly selected andfunctioning Litecoin nodes from the public network to the best of theoperator's understanding and capability.2. For the avoidance of doubt, the results may be randomized but must notsingle-out any group of hosts to receive different results unless due to anurgent technical necessity and disclosed.3. The results may not be served with a DNS TTL of less than one minute.4. Any logging of DNS queries should be only that which is necessaryfor the operation of the service or urgent health of the Litecoinnetwork and must not be retained longer than necessary nor disclosedto any third party.5. Information gathered as a result of the operators node-spidering(not from DNS queries) may be freely published or retained, but onlyif this data was not made more complete by biasing node connectivity(a violation of expectation (1)).6. Operators are encouraged, but not required, to publicly document thedetails of their operating practices.7. A reachable email contact address must be published for inquiriesrelated to the DNS seed operation.If these expectations cannot be satisfied the operator shoulddiscontinue providing services and contact the active LitecoinCore development team as well as posting on[litecoin-dev](https://groups.google.com/forum/#!forum/litecoin-dev).Behavior outside of these expectations may be reasonable in somesituations but should be discussed in public in advance.See also----------- [litecoin-seeder](https://github.com/pooler/litecoin-seeder) is a reference implementation of a DNS seed.