4 ms·

> Can I trust a instance of paaster not hosted by me? > No. Anyone could modify the functionality of paaster to expose your secret key to the server. We recomm

• jimsi 5y ago
  I think that providing API to be used by standalone clients is far more better approach
• derefr 5y ago
  AFAICT you could permanently trust a webapp loaded from an IPFS-scheme URI (as e.g. Brave can do), after it’s been audited once.
  • fastball 5y ago
    But then if you're using an IPFS gateway instead of hosting your own instance then the gateway could serve you different content, no?
    • fwtf 5y ago
      Since you request data by a hash, and your software should verify the downloaded data has the same hash, no.
      • stavros 5y ago
        If you're using a gateway, you have to trust the gateway.
        • arlort 5y ago
          You could probably have a pretty light wrapper around the gateway which verifies the hash. It wouldn't be as easy as simply using a gateway but still much easier than hosting/implementing an IPFS node locally
          • stavros 5y ago
            Well, to use the node locally you just run a binary, it's not like there's much to it.
            • fastball 5y ago
              No, but getting at content can sometimes take a while if it's not very actively seeded, e.g. I've had to wait hours for images to load on IPFS.
              • stavros 5y ago
                Yes, definitely. Discovery with IPFS is abysmal.