An easy way to share files P2P, and how it works

Re:An easy way to share files P2P, and how it works by whadar on Saturday July 06, 2013 @03:48PM (#5999827)

Why downloadable package is necessarily more secure than a live webpage over TLS (HTTPS)? Given that you can verify that Sharefest is Sharefest (using the certificate in the future), I don't see the big difference. I do think that a live webpage can be updated with security fixes more easily.

Being a live webpage also give us, as the developers, much less headaches in terms of protocol compatibility -- We maintain just one "version" of Sharefest client at the same time.

[ Parent | on HN ]

Re:An easy way to share files P2P, and how it works by StavrosK on Saturday July 06, 2013 @03:56PM (#5999857)

Because a downloadable package can't be replaced by something else the next time you use it, while Sharefest can, and nation-states can easily serve you whatever they want, even over SSL.

[ Parent | on HN ]

Re:An easy way to share files P2P, and how it works by whadar on Saturday July 06, 2013 @04:05PM (#5999894)

But nation-states can do that for downloadable packages as well, perhaps even the verifiers for those packages...

[ Parent | on HN ]

Re:An easy way to share files P2P, and how it works by whadar on Saturday July 06, 2013 @04:49PM (#6000029)

They can spoof the package and its key. If the root of trust (CA) is tempered as you suggest and the chain of trust is broken, I don't see how you can really secure it.

[ Parent | on HN ]

Re:An easy way to share files P2P, and how it works by StavrosK on Saturday July 06, 2013 @04:41PM (#6000009)

How?

[ Parent | on HN ]