re: Naming service specification, version 1.1 (incomplete)
"jrandom" <auto97841-revL73yDgGBWk0Htik3J/[email protected]> Sat, 6 Sep 2003 16:17:08 -0700
| Newsgroups | gmane.comp.security.invisiblenet.iip.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi co, et al. Sorry for the delay... been kinda busy :) Some thoughts on the the naming service spec 1.1... without knowing how the client libraries operate, it seems that overall it will work and operate well enough and doesn't seem to have any direct scalability problems, as long as the number of servers in the groups stays relatively small and the naming servers don't operate maliciously. The CA's in each group really aren't CAs though - they don't have a private key that it signs entries with (at least, not from what I can see), its more of a master/slave database replication scheme with group elections for the master. There are improvments that could be made for scaling as its use grows and for safe operation in environments where direct attacks are mounted against the servers, but this is probably fine for the short to medium term. Looking back at my notebook from a few months back when planning how I2P fits together, I have a note to myself in big bold, block letters: "Important: need to settle on an api/set of responsabilities for the network and the apps that use it. THIS IS MORE IMPORTANT THAN THE NETWORK ARCHITECTURE ITSELF" If the client libraries are crafted carefully to handle that sort of hard encapsulation, the naming service can be updated as necessary without any update to client applications. Which would be useful to incrementally adjust the implementation of the naming service back end [naming servers, local cache management, etc]. Or you can just tell me to sod off as you already know all this. The spec does look good and I do think this is good enough to get crunching on implementation after (as you said) the client side is spec'ed out. Nice work. my $0.02, -jrandom Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Free, ultra-private instant messaging with Hush Messenger https://www.hushmail.com/services.php?subloc=messenger&l=434 Promote security and make money with the Hushmail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427 _______________________________________________ iip-dev mailing list [email protected] http://lists.invisiblenet.net/mailman/listinfo/iip-dev