3 ms·
> The verification is fast and cheap. And yet the most widely used IPFS client, Brave, does not implement this. The blog post is technically wrong, but I thin
by danpalmer 4y ago
> The verification is fast and cheap.
And yet the most widely used IPFS client, Brave, does not implement this.
The blog post is technically wrong, but I think it's worth accounting for the general state of the ecosystem in these decisions, and in whether to include IPFS in cURL, and it sounds like the general state of the ecosystem is not up to the standards that cURL should reasonably expect from a protocol asking for inclusion.
- jstanley 4y agoBrave uses its own local gateway running go-ipfs. go-ipfs verifies the content, so Brave does not have to. You only have to verify the content yourself if it is not being verified by someone you trust (i.e. a local gateway that you're running yourself).
- danpalmer 4y agoThat's not what their documentation says. It says that it uses a public gateway, and prompts the user asking if they would like to use a local gateway, at which point it will download go-ipfs and run that. That's a fairly smooth UX to get a local gateway running, but I wouldn't bet money on it being used by the majority. Most people take the path of least resistance, and it's up to projects like Brave or cURL to ensure that the path is safe, which in this case it is not for Brave.