View Issue Details

IDProjectCategoryView StatusLast Update
0003603secusharemulticastpublic2019-02-12 09:13
ReporterBart Polot Assigned To 
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status confirmedResolutionopen 
Summary0003603: Multicast needs an access control system.
DescriptionMulticast peers need to use a signed authorization from the origin to avoid querying the origin every time they join the group.
TagsNo tags attached.

Relationships

child of 0003601 confirmed Multicast needs a peer discovery mechanism 

Activities

Bart Polot

2014-12-30 15:00

reporter   ~0008739

Last edited: 2014-12-30 15:01

The access token should be tied to a person/user, not a PeerIdentity, to allow the user to access the group from different devices/peers (simultaneosly?).

Bart Polot

2014-12-30 15:07

reporter   ~0008740

The authorization can be issued to one key directly or allow chaining.

First case is simple to implement, but requires several devices to share the same private key (for instace, PBKDF fro ma secret password).


Second case:
- origin signs the "master key": the key identifying the person.
- person uses its "master key" to sign various device/peer keys. This can be made ephemeral.

Christian Grothoff

2015-01-01 00:10

manager   ~0008746

Again, that's part of PSYC. Psyc stores the list of active group members in the state, and multicast can query psyc about who is allowed to join.

Issue History

Date Modified Username Field Change
2014-12-30 14:56 Bart Polot New Issue
2014-12-30 14:56 Bart Polot Status new => assigned
2014-12-30 14:56 Bart Polot Assigned To => Bart Polot
2014-12-30 14:56 Bart Polot Relationship added child of 0003601
2014-12-30 15:00 Bart Polot Note Added: 0008739
2014-12-30 15:01 Bart Polot Note Edited: 0008739
2014-12-30 15:07 Bart Polot Note Added: 0008740
2015-01-01 00:10 Christian Grothoff Note Added: 0008746
2015-11-26 11:38 Christian Grothoff Assigned To Bart Polot => tg
2018-06-07 01:15 Christian Grothoff Assigned To tg =>
2018-06-07 01:15 Christian Grothoff Status assigned => confirmed
2019-02-12 09:12 Christian Grothoff Project GNUnet => secushare
2019-02-12 09:12 Christian Grothoff Category multicast service => General
2019-02-12 09:13 Christian Grothoff Category General => multicast