Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PROTOCOL UPGRADE] Deduplicate content when creating a revision via signing/witnessing #11

Open
rht opened this issue Oct 13, 2024 · 0 comments

Comments

@rht
Copy link

rht commented Oct 13, 2024

The current limitation with v1.2 is that whenever one signs/witness a revision, a new revision is created which contains the entire duplicate of the previous revision + the signature/witness, which then results in a different verification hash, because the "previous_verification_hash" field has changed too.

There are 4 alternatives to this:

  1. Treat every revision metadata as a new element in a linked list that grows one by one whenever an element is added (local_timestamp, witness, signature, etc). The linked list is then secured by a Merkle tree.
  2. Make content optional as a part of selective disclosure.
  3. Create 3 types of revision: content-only, signature-only, or witness-only.
  4. Do it the way Git does it with GPG signature, where the signature envelopes the commit hash, but not a part of it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant