On Tuesday 14 August 2007 03:03, Michael Rogers wrote:
>
> New users shouldn't choose a puzzle to solve at random, otherwise a
> spammer could use a Sybil/replay attack: for each legitimate identity,
> create one or more Sybils with the same puzzle as the legitimate
> identity. When a new user solves the puzzle, use the solution to get
> onto the legitimate identity's WoT list.

Not possible. The puzzle would form part of the insert key. As long as the 
puzzle is reasonably long, you can't find out what key newbies are inserting 
to.
>
> > How to expire an old puzzle and how to publish all this info on puzzles
> > / web of trust?  An internal board receiving daily/weekly postings from
> > each user on their current WoT and puzzle?
>
> Sounds like a good idea. Or have a KSK for each user, similar to Frost
> file sharing.
>
> Cheers,
> Michael

Attachment: pgprlQVmOMYVW.pgp
Description: PGP signature

_______________________________________________
Devl mailing list
Devl@freenetproject.org
http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to