I believe that the risk of mapping freenet by requesting keys that
map to your own webserver are mitigated by two important factors.

1) There is a relationship between freenet keys and the gateway hint,
specifically, one should hash to the other.  This is easy to check.  
Checking for this this makes it impractial to probe freenet for 
a specific key.  Put another way, you couldt see where random 
keys would route to, but you can't see where arbitrary keys would
route to.

2) Whether or not a node runs gateways or any particular gateway is
configurable.  Individual node operators can weigh the risks and
benefits of gatwaying to other protocols and decide for themselves
whether they want that exposure for particular nodes.  Extrapolating
from the paper referenced in the architectural notes, if there are
N freenet nodes in the network, this mechanism will function if just
roughly log(N) nodes run gateways.  You can't map nodes that don't
run the gateway.

Pragmatically, if you want to gather intelligence about where things
route, you can just run nodes and dump their routing tables.  I think
that the benefits of this outweigh the risks, but that's a decision 
that each node operator can make for themselves.  Heck, you can even
run multiple nodes on the same machine, some that gateway to different
protocols, and some that don't gateway at all.

On Fri, 08 Nov 2002 15:54:03 -0800 Oskar Sandberg <[EMAIL PROTECTED]> wrote:
>
>This idea was first brought up about three years ago or so. It is 
>not a
>viable because it allows for easy mapping of freenet - just request 
>data
>for different (nonexistant) keys with a "gatewayhint" pointing at 
>an
>http server you control, and freenet spills the beans on where it 
>routes
>for those keys.
>
>On Fri, Nov 08, 2002 at 10:27:02AM -0800, [EMAIL PROTECTED] wrote:
>> 
>> As promised, archetectural notes:
>> 
>> Gatekeeper:
><blabla> 
>
>-- 
>
>Oskar Sandberg
>[EMAIL PROTECTED]
>
>_______________________________________________
>devl mailing list
>[EMAIL PROTECTED]
>http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/devl
>
>



Get your free encrypted email at https://www.hushmail.com

_______________________________________________
devl mailing list
[EMAIL PROTECTED]
http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to