3 ms·
Help me understand. Why sign resources? To prove authorship? What prevents me from signing a resource that's actually "someone else's"? Your idea about content
by niftich 10y ago
Help me understand. Why sign resources? To prove authorship? What prevents me from signing a resource that's actually "someone else's"?
Your idea about content-addressable storage (ie. by hash) has been implemented in networks like IFPS [1], Freenet [2], and Bittorrent [3]. With the introduction of a recent spec called subresource integrity [4], a content-addressable cache/database was proposed, but it has an interesting security implication (failure mode) discussed in this HN thread [5].
[1] https://ipfs.io/ https://ipfs.io/
[2] https://freenetproject.org/ https://freenetproject.org/
[3] http://stackoverflow.com/questions/3844502/how-do-bittorrent-magnet-links-work http://stackoverflow.com/questions/3844502/how-do-bittorrent...
[4] https://www.w3.org/TR/SRI/ https://www.w3.org/TR/SRI/
[5] https://news.ycombinator.com/item?id=10310594 https://news.ycombinator.com/item?id=10310594