docs: clarify RPC credentials security boundary #33196

pull crStiv wants to merge 1 commits into bitcoin:master from crStiv:ishak2 changing 1 files +14 −0
  1. crStiv commented at 1:56 pm on August 15, 2025: none

    Explicitly states that RPC credentials grant full administrative access to the node and filesystem resources accessible by bitcoind. Adds a new section in JSON-RPC-interface.md to address issue #32274 by documenting that providing RPC credentials to untrusted clients

    reopened #32424

    P.S. I’ve tried to somehow squash all the commits from the previous pr but accidentally closed the pr and had no idea how to return back, therefore created a new pr, I’m really sorry for the inconvenience

  2. docs: clarify RPC credentials security boundary 433954b6a5
  3. DrahtBot added the label Docs on Aug 15, 2025
  4. DrahtBot commented at 1:56 pm on August 15, 2025: contributor

    The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.

    Code Coverage & Benchmarks

    For details see: https://corecheck.dev/bitcoin/bitcoin/pulls/33196.

    Reviews

    See the guideline for information on the review process.

    Type Reviewers
    ACK janb84

    If your review is incorrectly listed, please react with 👎 to this comment and the bot will ignore it on the next update.

  5. janb84 commented at 9:03 am on August 18, 2025: contributor

    ACK 433954b6a5bd7480f7e05e58eafeac1dc6dfae7c

    This PR adds information about security considerations when using RPC clients. Although bitcoin-core has done everything to minimise the risks of using RPC, it’s good to inform the user of the risks and the extra security precautions the user can take.

    Informing the public about security risks and methods to mitigate them demonstrates responsible stewardship; therefore, I support this pull request.


github-metadata-mirror

This is a metadata mirror of the GitHub repository bitcoin/bitcoin. This site is not affiliated with GitHub. Content is generated from a GitHub metadata backup.
generated: 2025-08-22 18:12 UTC

This site is hosted by @0xB10C
More mirrored repositories can be found on mirror.b10c.me