Re: [Mldonkey-users] Now that Filenexus, Sharereactor and Jigle are gone

[b8_bavard]

What I mean is:

- The only way to search Edonkey is either by keywords or by md4. md4
   cannot be used to publish arbitrary content (I mean, you cannot
   say: tomorrow, I will publish the new releases under this md4,
   because you don't know yet the md4 of the file you will
   publish). So, you need to fix a filename format for the releases:
   confirmed-releases-YYYYMMDD.dat for example. Unfortunately,
   everybody is able to create such a file, and to pollute the
   namespace, so the only solution would be to add the capability to
   sign publications: the description of the result would then contain
   tags like "public-key" and "signed-md4" so that the server can
   check that a particular result is published by the owner of the
   public-key (and remove the false releases), and people would be
   allowed to search files, adding a "public-key". It could probably
   even be done without the collaboration of the servers (they still
   need to be able to search for a particular key), your client just
   has to check the received results for correct keys and encryption
   of the md4 with the private key.

- b2_bavard

>  Le Fri, 19 Mar 2004 11:37:54 +0100 (CET), b8_bavard <address@hidden>
>  a ?crit :
>  
>  > The main interest of Sharereactor is that they verify the downloads before
>  > publishing them. So, to do that, you need to use authentication keys
>  > to ensure that the sender is trustworthy. Unfortunately, Edonkey doesn't
>  > allow this easily (only servers could do that, so you need to modify them
>  > first).
>  
>  I don't trust servers much either. I'd prefer digitally signed posts, with
>  public keys floating around.
>  
>  So that if I trust a sender (either because of previous posts, or upon
>  recommendation from another source), and can check if it wrote another
>  post...