identify protocol could close connection if remote peer sends invalid public key

[jameshiew]

Description

Remote peer shouldn't ever be providing a public key that doesn't match their peer ID, in this case could close the connection

I haven't tested but it looks like this is what js-libp2p does, for example (https://github.com/libp2p/js-libp2p/blob/d19974d93a1015acfca95c2155dbcffc5fd6a6c0/packages/protocol-identify/src/identify.ts#L106-L108)

Motivation

See discussion at * #5707 (comment)

Current Implementation

identify protocol connection to remote peer stays open

Are you planning to do it yourself in a pull request ?

Maybe

[drHuangMHT]

The specs doesn't seem to have any information about what to do when there is a pubkey mismatch. An event of it can be emitted though.

[dariusc93]

The specs doesn't seem to have any information about what to do when there is a pubkey mismatch. An event of it can be emitted though.

Thats a good point. Maybe we can add an event for some type of mismatch and let the node itself handle the disconnection (or whatever it wish to do with the peer in question) while we take the question to spec on what to do on a public key mismatch?

[jxs]

I'd suggest we bubble up this discussion with a PR to the specs, so that the decision is transversal to all the implementations.