Re: p2p webserver
Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]> Sat, 29 Jun 2013 12:54:50 +0100
| Newsgroups | gmane.network.freenet.technical |
|---|---|
| Message-ID | <[email protected]> |
--===============0147551669== Content-Type: multipart/signed; boundary="nextPart3315339.8M7UQvEz3n"; protocol="application/pgp-signature"; micalg=pgp-sha256 Content-Transfer-Encoding: 7bit --nextPart3315339.8M7UQvEz3n Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable On Saturday 22 Jun 2013 14:08:00 Zwiebelcode wrote: > If java would be more secure, then a decentral webserver would be > nice... users upload java classes into freenet und freenet is spreading > it to the network... and then some users execute to class files with > restricted java policies. >=20 > Or more easily: Lets allow java applets on client side. These java > applets could be more restricted than normal applets. And then make an > api for those applets, where the applets can fetch or upload chk, ssk, > ssk,... >=20 > just another thought :-) Unfortunately, even if we assume Java's sandboxing code works (it breaks re= gularly), building a sandboxed API for Freenet that doesn't allow bad thing= s is really hard. =46or example, just the ability to insert and request, and time those reque= sts, is enough for a malicious applet to discover a great deal about the us= er: Roughly where they are on the network, what they have in their client c= ache (i.e. what they download / what forums they follow), etc. --nextPart3315339.8M7UQvEz3n Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEABEIAAYFAlHOywsACgkQYUNbc3WUHYgoNACfZRh+q6KXkoPMp0OXdaQKLShy JqcAn2sSNFRqF+/N9GCrosC8XJKnbt8d =XBD2 -----END PGP SIGNATURE----- --nextPart3315339.8M7UQvEz3n-- --===============0147551669== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Tech mailing list [email protected] https://emu.freenetproject.org/cgi-bin/mailman/listinfo/tech --===============0147551669==--