3 ms·
Yes, I agree this is a weak point. It's also one that the team is aware of and seemingly has the right amount of discomfort with. I see temporary compromises li
by steveklabnik 3y ago
Yes, I agree this is a weak point. It's also one that the team is aware of and seemingly has the right amount of discomfort with. I see temporary compromises like this as an example of the pragmatic decision making needed to ship, and trust that they will do the right things here, but I also understand some skepticism.
- sleepybrett 3y agoIt's not a 'weak point' it's a fatal flaw.
- steveklabnik 3y agoGiven that it is a non-essential part of how the protocol works, I disagree, but I understand that reasonable people may differ.
- pfraze 3y agoPLC uses signed logs similar to certificate transparency. We have a lot of options for where to take it. There may be a distributed/decentralized hosting system if we can settle on a consensus model we're comfortable with. Otherwise it will be some kind of org management model. The other direction we've got is did:web, which is already used in some cases, and has some tradeoffs but is a strong option.