Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HTTP Gateway Validator #593

Open
1 of 4 tasks
lidel opened this issue Sep 21, 2018 · 0 comments
Open
1 of 4 tasks

HTTP Gateway Validator #593

lidel opened this issue Sep 21, 2018 · 0 comments
Labels
exp/expert Having worked on the specific codebase is important help wanted Seeking public contribution on this issue kind/enhancement A net-new feature or improvement to an existing feature status/ready Ready to be worked topic/security Work related to security

Comments

@lidel
Copy link
Member

lidel commented Sep 21, 2018

AKA checksuming payload as it arrives from untrusted gateway
and checking if it match expected CID

Context

See Verifiable HTTP Gateway Responses at ipfs/in-web-browsers#128

Work

  • research if/how we could calculate checksum as data arrives
  • research how we resolve CID of resources under a path and get insight into DAG structure
    • A: additional lookup via local js-ipfs used only for that or fallback on http://ipfs.io/api/v0/
    • B: additional HTTP headers with required metadata
  • research and design UX for indicating the payload is verified
  • implement streaming validator that drops connection if payload does not match expected digest

Related Resources

@lidel lidel added kind/enhancement A net-new feature or improvement to an existing feature help wanted Seeking public contribution on this issue topic/security Work related to security UX exp/expert Having worked on the specific codebase is important labels Sep 21, 2018
@lidel lidel added the status/ready Ready to be worked label Sep 22, 2018
@jessicaschilling jessicaschilling added topic/design-ux UX strategy, research, not solely visual design and removed UX labels Mar 30, 2020
@jessicaschilling jessicaschilling removed the topic/design-ux UX strategy, research, not solely visual design label Apr 7, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
exp/expert Having worked on the specific codebase is important help wanted Seeking public contribution on this issue kind/enhancement A net-new feature or improvement to an existing feature status/ready Ready to be worked topic/security Work related to security
Projects
No open projects
Status: Needs Grooming
Development

No branches or pull requests

2 participants