Fwd: How to avoid friends of friends joining the vpn ?

[Azul]

Tinc 1.0
3 control masters
Many service hosts
Laptop (road warrior)

The control masters have the public keys for the service hosts and the
laptop so that they can join the network.

How can I prevent the laptop user to connect additional boxes to the
network?

In my view he can simply add new 'foreign' hosts and specify connectTo to
point to the laptop.
As keys are exchanged automatically then these 'foreign' boxes would have
access to all the service nodes.

Whats the best way to prevent that ?

Thanks
Azul
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20160313/ef9b7ca6/attachment.html>