I propose:
- We implement a Simple Revocable Key wrapper. This is simply a USK,
  with the prefix being SRK instead of USK, and where we check for
  SSK@<pubkey>/revoked. If this exists we return a permanent redirect to
  it, instead of the data to be returned otherwise.

This does not affect Metadata, and therefore does not imply long-term
maintenance; it is easy to use by e.g. ordinary freesite authors. It may
not be sufficient for FPI's needs for an official freesite, but it is
easy to implement.

I will implement a proper RSK mechanism later, along the lines of what I
have outlined in my other email.

SRKs and RSKs can reasonably coexist; few sites will need the full
capabilities of RSKs.
-- 
Matthew J Toseland - toad at amphibian.dyndns.org
Freenet Project Official Codemonkey - http://freenetproject.org/
ICTHUS - Nothing is impossible. Our Boss says so.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20060519/a26904f8/attachment.pgp>

Reply via email to