Viral.js – Peer-to-peer web app distribution

Re:Viral.js – Peer-to-peer web app distribution by CiPHPerCoder on Friday July 29, 2016 @10:12AM (#12186916)

> Security : how do you guarantee that a client peer is not tinkering with the code it distributes further?

You could make a system involving digital signatures (EdDSA), but then "how do you trust which public key?" type questions mean this doesn't improve much.

[ Parent | on HN ]

Re:Viral.js – Peer-to-peer web app distribution by AgentME on Friday July 29, 2016 @02:03PM (#12188632)

If I'm understanding this right, you could include the public key in the web page itself, served over HTTPS. There's still a webpage being served from your server. It just delegates most of the resources to be accessed over webrtc.

[ Parent | on HN ]

Re:Viral.js – Peer-to-peer web app distribution by abloodywar on Friday July 29, 2016 @10:45AM (#12187151)

Maybe Subresource Integrity[1] would be of interest.

[1] https://www.w3.org/TR/SRI/

[ Parent | on HN ]