[Apso-devel] Hiding revision IDs

[Jeronimo Pellegrini]

This was brought up by Ulf Ochsenfahrt on Monotone-devel.

Currently, Apso stores encrypted deltas in files whose name
is the revision ID.

Suppose you're working on project MyBSD, which is a modified version
of the FreeBSD kernel. Then one day you resync with the FreeBSD
tree. This delta from the BSD tree is well-known, and it would
show to an attacker that you are working on a fork of FreeBSD.

Maybe there is a way to not give away the revision ID like that?

We could use random strings to identify encrypted deltas, and then
we'd need to keep an ancestry map of these IDs, and a mapping from
them onto real revision hashes.

J.