News for hackers. Stuff that matters.

A comment on Software design mistakes that Diaspora needs to fix.. Parent comment

Re:Software design mistakes that Diaspora needs to fix. by imaginator on Tuesday December 07, 2010 @11:17AM (#1979465)
Don't worry about the verboseness of XMPP - TLS with the deflate option drops that down to 10% of the original size. Or you can do what google did on Android and write your own binary protocol representation.

If I setup a new appleseed node and how do you really know it is me/example.com? I've yet to see that done well in http and would love to be proven wrong.

[ Parent | on HN ]
Re:Software design mistakes that Diaspora needs to fix. by michaelchisari on Tuesday December 07, 2010 @11:28AM (#1979504)
Right now, all requests require a callback with a token. user [email protected] sends a request to [email protected] with a generated token. [email protected] then sends a verification request back with that token to [email protected], and [email protected] sends back true, and [email protected] completes the request.

Which, if I'm not mistaken, is very similar to how XMPP does it.

The protocol also tries and minimizes the amount of actions that a third party node can take. You only trust your own node to take actions on your behalf.

[ Parent | on HN ]