Changes between Initial Version and Version 1 of Ticket #3876


Ignore:
Timestamp:
2022-03-07T14:30:50Z (3 years ago)
Author:
itamarst
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #3876

    • Property Type changed from enhancement to defect

  • Ticket #3876 – Description

    initial v1  
    11Right now the `IStorageClient` HTTP emulator has a single upload secret per server. This is not too bad, but can leak information for people using Tor/I2P because the server can correlate uploads.
     2
     3This was caused by the HTTP server validating the upload secret across all in-progress uploads (==buckets). If two clients ever used a different upload secret for different shares of the same storage index, they couldn't do parallel uploads. This seems wrong, shares are independent.
     4
     5So the HTTP API should be changed so that upload secrets are not checked at bucket creation time. It should be fine to have different upload secrets for different shares of the same storage index.