Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The section about secio is obsolete #91

Closed
tomaka opened this issue May 27, 2020 · 3 comments
Closed

The section about secio is obsolete #91

tomaka opened this issue May 27, 2020 · 3 comments

Comments

@tomaka
Copy link

tomaka commented May 27, 2020

https://github.com/w3f/research/blob/master/docs/polkadot/keys/4-secio.md

The document mentions scepticism about secio, and we've since then removed secio from the Substrate and Polkadot code bases.
Polkadot/Kusama right now are using the official libp2p noise.

The plan to try to use QUIC in the long term is still relevant, though.

@burdges I've been told to ping you!

@burdges
Copy link
Contributor

burdges commented May 27, 2020

At this point transport key are maybe more @infinity0 now than me, but I can make some changes.

@infinity0
Copy link
Contributor

Didn't realise that section existed but sure, I can take responsibility for fixing this. A large section of the docs are slightly out-of-date for sure and could do with a revamp.

@burdges
Copy link
Contributor

burdges commented Jun 9, 2020

It's extremely stale now, so I just removed it in 9ffffa0

I've never figured out whether certifying transport layer keys matters much. I'm still pushing for it as a defense in depth, so presumably anything that goes here should discuss certifying transport layer keys, ala paritytech/substrate#6251 (comment)

We should prioritize networking improvements that impact scalability however, so imho this could sit empty for a while. I'll mention it in https://github.com/w3f/research-security-issues/issues/26

@burdges burdges closed this as completed Jun 9, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants