View Issue Details

IDProjectCategoryView StatusLast Update
0003603secusharemulticastpublic2019-02-12 08:13
ReporterBart Polot Assigned ToDue Date
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status confirmedResolutionopen 
Summary0003603: Multicast needs an access control system.
DescriptionMulticast peers need to use a signed authorization from the origin to avoid querying the origin every time they join the group.
TagsNo tags attached.

Relationships

child of 0003601 confirmed Multicast needs a peer discovery mechanism 

Activities

Bart Polot

2014-12-30 14:00

reporter   ~0008739

Last edited: 2014-12-30 14:01

The access token should be tied to a person/user, not a PeerIdentity, to allow the user to access the group from different devices/peers (simultaneosly?).

Bart Polot

2014-12-30 14:07

reporter   ~0008740

The authorization can be issued to one key directly or allow chaining.

First case is simple to implement, but requires several devices to share the same private key (for instace, PBKDF fro ma secret password).


Second case:
- origin signs the "master key": the key identifying the person.
- person uses its "master key" to sign various device/peer keys. This can be made ephemeral.

Christian Grothoff

2014-12-31 23:10

manager   ~0008746

Again, that's part of PSYC. Psyc stores the list of active group members in the state, and multicast can query psyc about who is allowed to join.

Issue History

Date ModifiedUsernameFieldChange
2014-12-30 13:56Bart PolotNew Issue
2014-12-30 13:56Bart PolotStatusnew => assigned
2014-12-30 13:56Bart PolotAssigned To => Bart Polot
2014-12-30 13:56Bart PolotRelationship addedchild of 0003601
2014-12-30 14:00Bart PolotNote Added: 0008739
2014-12-30 14:01Bart PolotNote Edited: 0008739
2014-12-30 14:07Bart PolotNote Added: 0008740
2014-12-31 23:10Christian GrothoffNote Added: 0008746
2015-11-26 10:38Christian GrothoffAssigned ToBart Polot => tg
2018-06-06 23:15Christian GrothoffAssigned Totg =>
2018-06-06 23:15Christian GrothoffStatusassigned => confirmed
2019-02-12 08:12Christian GrothoffProjectGNUnet => secushare
2019-02-12 08:12Christian GrothoffCategorymulticast service => General
2019-02-12 08:13Christian GrothoffCategoryGeneral => multicast