3 ms·

Pubs are being phased out in favour of rooms[1]. You can totally have SSB work without pubs and rooms, it just takes longer for you to see some messages dependi

Pubs are being phased out in favour of rooms[1]. You can totally have SSB work without pubs and rooms, it just takes longer for you to see some messages depending on how far away you are from the gossip. Rooms are much simpler than pubs, they just provide a tunnel for peers to gossip as if they were on LAN. It is more of a convenience than a requirement. > every message needs to be public Not at all. SSB has multiple types of private messages. They can only be decrypted by the intended recipients since the key used to sign it is a derivation of a combination of the keys from the sender and the recipients [2]. There is even a new spec for private groups[3]. [1]: https://ssb-ngi-pointer.github.io/rooms2 https://ssb-ngi-pointer.github.io/rooms2 [2]: https://ssbc.github.io/scuttlebutt-protocol-guide/#private-messages https://ssbc.github.io/scuttlebutt-protocol-guide/#private-m... [3]: https://github.com/ssbc/ssb-tribes/ https://github.com/ssbc/ssb-tribes/

southerntofu 5y ago
> Not at all. SSB has multiple types of private messages. I didn't mean that everything has to be plaintext, but has to be public in order for gossip to work. Or did i miss something? It's fine if metadata aggregation is not a concern of yours, and if you're rather certain your encryption algorithms won't be broken in the next decades. That rooms2 proposal looks very interesting (didn't read it all), but i'm curious if there's a state-of-the-art review you can link me to. I just don't understand the necessity to develop yet another protocol if the goal is just to break through NAT?
- soapdog 5y ago
  I understand your concerns regarding metadata aggregation. SSB was not designed with those considerations. I think that with those concerns as a constraint you kinda need a different protocol. I think that rooms2 required a new protocol because of the handshake required for two peers to connect. I'm not an expert on protocol stuff, I write one of the clients but I'm usually working on higher levels than protocol work. I suspect that rooms2 is not just NAT breakage but it has some of the handshake and security involved in it. If you want to dig deeper, I suggest asking for links on their rooms 2.0 repo. I'm not aware of a review like that, but I'm usually working with other stuff. I know there were some papers published recently, maybe those will appeal to you. :-)
olah_1 5y ago
are there any ideas to introduce rotating keys? i dont like that the feeds are permanent and if you leak a key, people see the whole history.

southerntofu 5y ago

> Not at all. SSB has multiple types of private messages. I didn't mean that everything has to be plaintext, but has to be public in order for gossip to work. Or did i miss something? It's fine if metadata aggregation is not a concern of yours, and if you're rather certain your encryption algorithms won't be broken in the next decades. That rooms2 proposal looks very interesting (didn't read it all), but i'm curious if there's a state-of-the-art review you can link me to. I just don't understand the necessity to develop yet another protocol if the goal is just to break through NAT?

soapdog 5y ago
I understand your concerns regarding metadata aggregation. SSB was not designed with those considerations. I think that with those concerns as a constraint you kinda need a different protocol. I think that rooms2 required a new protocol because of the handshake required for two peers to connect. I'm not an expert on protocol stuff, I write one of the clients but I'm usually working on higher levels than protocol work. I suspect that rooms2 is not just NAT breakage but it has some of the handshake and security involved in it. If you want to dig deeper, I suggest asking for links on their rooms 2.0 repo. I'm not aware of a review like that, but I'm usually working with other stuff. I know there were some papers published recently, maybe those will appeal to you. :-)

olah_1 5y ago

are there any ideas to introduce rotating keys? i dont like that the feeds are permanent and if you leak a key, people see the whole history.