4 ms·
>Would it be possible to host a single _bit_ on the web that I KNEW could not be hacked, exploited, MITM'd? Yes... you need an offline host, public key crypto,
by mikewarot 4y ago
>Would it be possible to host a single _bit_ on the web that I KNEW could not be hacked, exploited, MITM'd?
Yes... you need an offline host, public key crypto, a data diode, and the web host.
The offline host contains all the stuff you want to be actually read-only, and signs it. Then spools it as a stream through the data diode out to the web server, which checks the stream for errors, and makes it available to the outside world.
Everything in the offline host CAN'T have ingress of control thanks to the data diode. Signing prevents MITM. You'll still be vulnerable to denial of service.