gnunet-svn
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[lsd0001] branch master updated: expand motivation


From: gnunet
Subject: [lsd0001] branch master updated: expand motivation
Date: Tue, 01 Feb 2022 20:51:44 +0100

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository lsd0001.

The following commit(s) were added to refs/heads/master by this push:
     new ccb3afc  expand motivation
ccb3afc is described below

commit ccb3afc38e16f6bc177a9dfaaf47449f09be1af8
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Tue Feb 1 20:51:41 2022 +0100

    expand motivation
---
 draft-schanzen-gns.xml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/draft-schanzen-gns.xml b/draft-schanzen-gns.xml
index 7dfec74..2d9f75e 100644
--- a/draft-schanzen-gns.xml
+++ b/draft-schanzen-gns.xml
@@ -1425,9 +1425,15 @@ NONCE := HKDF-Expand (PRK_n, label, 128 / 8)
        <name>BOX</name>
        <t>
          In GNS, with the notable exception of zTLDs, every "." in a name
-         delegates to another zone, and
+         delegates to another zone. Furthermore,
          GNS lookups are expected to return all of the required useful
-         information in one record set.  This is incompatible with the
+         information in one record set. This avoids unnecessary additional
+         lookups and cryptographically ties together information that belongs
+         together, making it impossible for an adversarial storage to provide
+         partial answers that might omit information critical for security.
+       </t>
+       <t>
+         However, this general strategy of is incompatible with the
          special labels used by DNS for SRV and TLSA records.  Thus, GNS
          defines the BOX record format to box up SRV and TLSA records and
          include them in the record set of the label they are associated

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]