Just realized:
- using avahi for local peer discovery, how does this compare to good ole bittorrent with
Protocol/Message Stream Encryption turned on, and DHT instead of a tracker?
- I guess the "self-signed certificate" discussion stems from the fact that TLS assumes
you have certificates – which really isn't the case in these peer-to-peer scenarios. All
you need is a *session key*, which, painting with a broom-sized brush here, can easily be
agreed on using e.g. Diffie-Hellman/25519 (as implemented in NaCl/libsodium).
Cheers,
Marcus
On 28.08.23 21:55, Richard Hughes wrote:
On Mon, 28 Aug 2023 at 16:27, Leon Fauster via devel
<devel@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
whats the benefit of this "self-signed TLS certificate" (as it does
not provide any "security")? Is this stub for something later ... ?
It's a good question. It provides encryption (so client A can provide
the file to client B without client C being aware what's being sent)
-- and also placates various corporate security teams that say that
HTTP without TLS isn't good enough -- even if it's got two other
layers of protection.
Richard
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
