News for hackers. Stuff that matters.
Re:Vapor – Decentralized Web over Bitcoinized HTTP by X6S1x6Okd1st on Wednesday October 07, 2020 @12:38PM (#24709973)
SSL certs can be self signed. Bitcoin addresses are not signed by any agency so they would work under a similar security model as a self signed cert.

> Vapor also addresses decentralization in distribution of content as well.

How? All I see some way of performing a replay or amplification attack using an unspecified gateway.

Re:Vapor – Decentralized Web over Bitcoinized HTTP by jdonaldson on Wednesday October 07, 2020 @02:04PM (#24710929)
These are just the details I gleaned from the article. But, I have a similar understanding... that the blockchain functionality is similar to self-signing.

The article bills Vapor as helping to decentralize the "data layer" of an api. This naturally has some immediate caveats... like... this sort of framework would not be suitable for real time or streaming Apis.

Also, the article doesn't really touch on the cost of maintaining all of this. It's true that vapor api hosts can charge a small transaction fee to maintain/run their processing nodes. I have to wonder what that looks like, and if people are willing to pay a per-request fee for an http transaction.

I don't believe this is intended to replace standard authentication, and calling out how it's impractical for common scenarios is fair game. However, I think it's more interesting to think about scenarios where this might be useful.

Re:Vapor – Decentralized Web over Bitcoinized HTTP by X6S1x6Okd1st on Wednesday October 07, 2020 @02:50PM (#24711342)
> However, I think it's more interesting to think about scenarios where this might be useful.

Such as?

Re:Vapor – Decentralized Web over Bitcoinized HTTP by jdonaldson on Wednesday October 07, 2020 @03:08PM (#24711532)
Well, the scenario would involve distributing information where one couldn't/shouldn't rely on a central authority. Imagine using this to coordinate protests against a government, or in countries where there's too much corruption to trust any centralization at all.
Re:Vapor – Decentralized Web over Bitcoinized HTTP by X6S1x6Okd1st on Wednesday October 07, 2020 @04:26PM (#24712326)
By my reading wrapping an HTTP request inside a bitcoin transaction does not solve for that use case.

Something like IPFS pubsub could work, or you could use any of the on-chain social networks that have sprung up, or you could use E2E group chats like everyone from the Taliban to activists in the US use.

Re:Vapor – Decentralized Web over Bitcoinized HTTP by jdonaldson on Wednesday October 07, 2020 @05:57PM (#24713230)
E2E group chats are closely related, but ephemeral. IPFS seems also closely related, but it's dealing more with the content of a file, and not really designed for handling the identity of who wrote or distributed the content.