Twister: Anonymous, private BtC/DHT/Torrent P2P microblogging

Post by sln » Fri, Jan 03, 2014, 11:42 PM UTC

betterunix wrote: post #50

sln wrote: post #46

Earlier quoted context omitted.

Basically, if you have anonymous, P2P, encrypted messaging you need to solve the problem of maintaining a public ledger of user names to public keys. There are several approaches to this, but one of the most compelling right now is using the exact same mechanism that bitcoin uses to prevent double spending. Twister has absolutely nothing to do with bitcoin, they are only similar in that double-spending a bitcoin is a…

"the problem of maintaining a public ledger of user names to public keys" What is the point of that ledger? Public keys identify users on their own.

Yes they do but 1) most people are more comfortable dealing with usernames compared to public keys, and 2) distributing the public keys themselves can be tricky if you don't already have a trusted connection set up (just look at past abuses of Certificate Authorities for examples of this).

Post by betterunix » Sat, Jan 04, 2014, 1:49 PM UTC

sln wrote: post #51

betterunix wrote: post #50

Earlier quoted context omitted.

"the problem of maintaining a public ledger of user names to public keys" What is the point of that ledger? Public keys identify users on their own.

Yes they do but 1) most people are more comfortable dealing with usernames compared to public keys, and 2) distributing the public keys themselves can be tricky if you don't already have a trusted connection set up (just look at past abuses of Certificate Authorities for examples of this).

I do not see how distributing keys is "tricky" in this context. If you do not know who you are communicating with, then a man in the middle attack works if the attack occurs during your first attempt to communicate (think SSH); this would seem to be true regardless of the existence of a ledger, since you need to figure out which username you want to communicate with. If you do know who you are communicating with, you can distribute keys offline (e.g. "contact me with $key") or establish keys via some existing communication channel (OTR, PGP, whatever), just as you would have to distribute your username offline or via another channel given the ledger.

So sure, I can grant people are more comfortable dealing with usernames than with public keys, but that sounds more like a UI problem than a technology problem. People are certainly capable of dealing with Tor hidden service addresses, and I suspect that is because they are already using a UI they know well (their web browser).

Re: Twister: Anonymous, private BtC/DHT/Torrent P2P microblogging

Re: Twister: Anonymous, private BtC/DHT/Torrent P2P microblogging