HelloZeroNet / HelloZeroNet/ZeroNet

Ability to revoke/block own key

Aperta
#1,988 9 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
JavaScript
Stelle
18.8k
Fork
2.3k
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

Would be nice to be able to broadcast messages like "this key was compromised" and/or "no further messages from this key are valid". This would address both the problem of private key already being compromised and add ability to lock the site forever (whether because there's a danger of key being compromised in the future or just because site is intended to be static).

When a node receives "compromised" message, it should stop accepting any further updates from the key and it would be nice to also mark data as potentially replaced by third-parties. When a node receives "no further updates" message, it does the same without marking data as compromised, and should also still react on "compromised" message (in order to prevent attacker to first replace content and then freeze it).

Potential drawback: this would add ability to kill all services based on private keys being public. But those are already susceptible to any kind of attack, so personally i don't think it's that bad. Also, it should be possible to also add "exception" feature if these are considered important enough.

PS: I think this was mentioned before on the network, but i couldn't find an issue here.

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.