Secure tunnels¶

Blackbook can also act as a trusted introducer between two of its clients, opening an end-to-end-encrypted tunnel that the server relays but cannot read. It's like ssh -L port forwarding, but the two ends authenticate each other using the certificates Blackbook already issued them, and the server only ever sees encrypted frames.

# On bob's machine (the side that can reach the target service):
bbk -P bob tunnel accept --from alice

# On alice's machine — forward a local port to bob, who dials the target:
bbk -P alice tunnel forward bob --listen 127.0.0.1:5432 --to 10.0.0.5:5432

Anything hitting 127.0.0.1:5432 on alice's machine is encrypted end-to-end to bob, who connects onward to 10.0.0.5:5432. Carries TCP or UDP, no VPN software or admin rights required.