Re: p2p webserver

Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]> Sat, 29 Jun 2013 12:54:50 +0100
Newsgroups gmane.network.freenet.technical
Message-ID <[email protected]>
--===============0147551669==
Content-Type: multipart/signed;
  boundary="nextPart3315339.8M7UQvEz3n";
  protocol="application/pgp-signature";
  micalg=pgp-sha256
Content-Transfer-Encoding: 7bit

--nextPart3315339.8M7UQvEz3n
Content-Type: Text/Plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

On Saturday 22 Jun 2013 14:08:00 Zwiebelcode wrote:
> If java would be more secure, then a decentral webserver would be
> nice... users upload java classes into freenet und freenet is spreading
> it to the network... and then some users execute to class files with
> restricted java policies.
>=20
> Or more easily: Lets allow java applets on client side. These java
> applets could be more restricted than normal applets. And then make an
> api for those applets, where the applets can fetch or upload chk, ssk,
> ssk,...
>=20
> just another thought :-)

Unfortunately, even if we assume Java's sandboxing code works (it breaks re=
gularly), building a sandboxed API for Freenet that doesn't allow bad thing=
s is really hard.

=46or example, just the ability to insert and request, and time those reque=
sts, is enough for a malicious applet to discover a great deal about the us=
er: Roughly where they are on the network, what they have in their client c=
ache (i.e. what they download / what forums they follow), etc.

--nextPart3315339.8M7UQvEz3n
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEABEIAAYFAlHOywsACgkQYUNbc3WUHYgoNACfZRh+q6KXkoPMp0OXdaQKLShy
JqcAn2sSNFRqF+/N9GCrosC8XJKnbt8d
=XBD2
-----END PGP SIGNATURE-----

--nextPart3315339.8M7UQvEz3n--

--===============0147551669==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Tech mailing list
[email protected]
https://emu.freenetproject.org/cgi-bin/mailman/listinfo/tech
--===============0147551669==--