felixfoertsch/decentralized-ecosystem
1
0
Fork 0
mirror of https://gitlab.com/bluesky-community1/decentralized-ecosystem.git synced 2026-04-17 23:08:34 +02:00
Code Issues Packages Projects Releases Wiki Activity

update security, discovery, blockchain-social, identity

Browse Source
This commit is contained in:
Jay Graber
2020-07-03 21:41:33 -07:00
parent 54e0cdc52a
commit 13f533049c
6 changed files with 48 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
protocols/peergos.md
View File

@@ -32,7 +32,7 @@ Access is controlled through cryptographic capabilities. Access is hierarchical,
A read-only capability consists of the hash of the file owner's public key, the hash of the writer's public key, a random label, and a symmetric encryption key. Access to files gained through social follows can be revoked by rotating cryptographic keys, but the interface does not display keys to users. Users simply click "revoke access to <user>".
To make a file or folder publically visible, a user can publish its capability. A user can also share secret links to files, like a google doc "share" link, which lets anyone who views it view the file. These [secret links](https://book.peergos.org/features/secret.html) don't expose the file to the server. The file is not transmitted unencrypted over the network, as the key to decrypt it is in the URL itself (in the hash fragment which isn't sent to the server), and is interpreted locally in the browser.
To make a file or folder publicly visible, a user can publish its capability. A user can also share secret links to files, like a google doc "share" link, which lets anyone who views it view the file. These [secret links](https://book.peergos.org/features/secret.html) don't expose the file to the server. The file is not transmitted unencrypted over the network, as the key to decrypt it is in the URL itself (in the hash fragment which isn't sent to the server), and is interpreted locally in the browser.
A writable capability includes the private key corresponding to the writer key, which is used to sign updates.