re: Naming service specification, version 1.1 (incomplete)

"jrandom" <auto97841-revL73yDgGBWk0Htik3J/[email protected]> Sat, 6 Sep 2003 16:17:08 -0700
Newsgroups gmane.comp.security.invisiblenet.iip.devel
Message-ID <[email protected]>
Hi co, et al.  Sorry for the delay... been kinda busy :)

Some thoughts on the the naming service spec 1.1...  without knowing
how the client libraries operate, it seems that overall it will work
and operate well enough and doesn't seem to have any direct scalability
problems, as long as the number of servers in the groups stays relatively
small and the naming servers don't operate maliciously.  The CA's in
each group really aren't CAs though - they don't have a private key that
it signs entries with (at least, not from what I can see), its more of
a master/slave database replication scheme with group elections for the
master.

There are improvments that could be made for scaling as its use grows
and for safe operation in environments where direct attacks are mounted
against the servers, but this is probably fine for the short to medium
term.  

Looking back at my notebook from a few months back when planning how
I2P fits together, I have a note to myself in big bold, block letters:
"Important: need to settle on an api/set of responsabilities for the
network and the apps that use it.  THIS IS MORE IMPORTANT THAN THE NETWORK
ARCHITECTURE ITSELF"

If the client libraries are crafted carefully to handle that sort of
hard encapsulation, the naming service can be updated as necessary without
any update to client applications.  Which would be useful to incrementally
adjust the implementation of the naming service back end [naming servers,
 local cache management, etc].  

Or you can just tell me to sod off as you already know all this.  The
spec does look good and I do think this is good enough to get crunching
on implementation after (as you said) the client side is spec'ed out.
 Nice work.

my $0.02,
-jrandom



Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427
_______________________________________________
iip-dev mailing list
[email protected]
http://lists.invisiblenet.net/mailman/listinfo/iip-dev