This is a perfect use case for Tor hidden services. They punch the NAT, they encrypt, there&#x27;s a robust discovery network, and the entire setup could be either scanning a QR code from the app on the phone or delivered over Bluetooth or local LAN or hypersonically or even clicking a link in an email the device sends you directly via SMTP (prepare to check your Spam folder).<p>I believe the latest gen hidden service descriptors also effectively <i>authenticate</i> as well because the unique domain is kept secret and has enough entropy. I&#x27;m not sure if it&#x27;s quite as simple as hash(domain) is public and the preimage is used as a key, but something like that.<p>I thought this article was going to be about the camera emailing snapshots back to China we talked about a few weeks back. A bit disappointed that it&#x27;s mostly FUD over simple IP discovery with perhaps some STUN&#x2F;TURN added in. So, in that regard using Tor instead may not help.<p>However IMO anything that makes .onion become mainstream is a very good thing.