On 5/19/06, Matthew Toseland <toad at amphibian.dyndns.org> wrote:
> I propose:
> - We implement a Simple Revocable Key wrapper. This is simply a USK,
>   with the prefix being SRK instead of USK, and where we check for
>   SSK@<pubkey>/revoked. If this exists we return a permanent redirect to
>   it, instead of the data to be returned otherwise.
>
> This does not affect Metadata, and therefore does not imply long-term
> maintenance; it is easy to use by e.g. ordinary freesite authors. It may
> not be sufficient for FPI's needs for an official freesite, but it is
> easy to implement.
>
> I will implement a proper RSK mechanism later, along the lines of what I
> have outlined in my other email.
>
> SRKs and RSKs can reasonably coexist; few sites will need the full
> capabilities of RSKs.
> --
> Matthew J Toseland - toad at amphibian.dyndns.org
> Freenet Project Official Codemonkey - http://freenetproject.org/
> ICTHUS - Nothing is impossible. Our Boss says so.
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (GNU/Linux)
>
> iD8DBQFEbiJzHzsuOmVUoi0RAv1mAJ4qOVN8LhXPQ5sjfj7C0KgzRW6UNwCfRIJW
> eAVl1c/WxYNykM1PWoW/TQY=
> =rMdl
> -----END PGP SIGNATURE-----
>
>
> _______________________________________________
> Devl mailing list
> Devl at freenetproject.org
> http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
>
>

Sounds like a good idea.
I still like the RSK idea better tho. It's capable of doing the same
thing by only giving yourself a key to revoke it but it takes longer
to implement.

Reply via email to