%EBVJY/tAVgWD/OzHVYibUjY/xW68Jsp47LvSdGi1c1E=.sha256
{ "previous": "%1DitreVd2gwewCOgEUse9thonA1zS0ADBEiZ79hKaYo=.sha256", "author": "@9nTgtYmvW4HID6ayt6Icwc8WZxdifx5SlSKKIX/X/1g=.ed25519", "sequence": 159, "timestamp": 1479043757708, "hash": "sha256", "content": { "type": "post", "channel": "anarchitecture", "text": "Request for feedback on the capability system I've been working on:\n\n* ssb://%iOckBbiDHl3j+yqHYlA4oU8VxiExkLBCqATHYRrpHOs=.sha256\n* http://localhost:7718/%25iOckBbiDHl3j%2ByqHYlA4oU8VxiExkLBCqATHYRrpHOs%3D.sha256\n* https://github.com/substack/hyperlog-capability\n\n# design\n\nThe cryptographic capabilities of the system are enforced implicitly by knowledge of secret keys. Each group has two keypairs: a signing key (sign) and an encryption key (box). The sign/box terminology corresponds to the underlying sodium crypto_sign and crypto_box methods for each keypair.\n\nThe group id is the concatenation of the signing public key with the box public key.\n\nIf you know the box key, you can read messages addressed to the group. If you know the sign key, you can create messages that will be accepted as legitimate communications on behalf of that group by other peers.\n\nWhen you write a document into the log, the document is encrypted with a unique 32-byte document key. Each group that will get access to this document receives a secret message encrypted to the group's box key. The secret message contains the document key.\n\nWhen you invite group A to join group B, you encrypt a message to A's box key with B's box and/or sign key. If A has access from an invite to B's box key, then A can decrypt any documents encrypted for B, including future invites. However, invites are one-way, so B can't read A's documents.\n\nThe only unit of social organization in this package is the group where a group refers to the agents that have access to that group's secret keys. For bootstrapping and other purposes, you will probably want to have each machine or personal identity belong to a single-member group.", "mentions": [] }, "signature": "NWe4lhX1q8bpOO3rOI0Z5axfNa6rD0ypIDkL8wajD/iJYDerEK65u35uv3/kzERujlzBWjGmV1YPTqBlrSuOBA==.sig.ed25519" }
Built with git-ssb-web