ProgrammingCube / lcdhost

Automatically exported from code.google.com/p/lcdhost
1 stars 0 forks source link

Crap web hosts kill LCDHost #23

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
Today CodeLeap's performance dropped like a stone...

...and suddenly LCDHost stopped loading. Well, it loads but it takes forever as 
each CodeLeap plugin was taking a minute or two to validate, and LCDHost paused 
it's startup routine to wait for each validation key.

Essentially, I (well, my host) have the power to severely cripple LCDHost, 
which is not good at all.

Suggestions:
1) Store the validation key in a hashtable against the url so it only has to 
get it once per host instead of redownloading the same file for each plugin
2) Put an aggressive time out. If it takes more than 5 seconds to download the 
tiny key file, something it wrong and LCDHost should move on.
3) Alternatively do the validation asynchronously, i.e. continue to load 
plugins while waiting for the validations to complete, and load the validated 
plugins as and when they are validated.

The other option, which I actually think is better in many ways anyway, is to 
stop LCDHost from validating plugins against keys hosted anywhere but 
linkdata.se. 

In this way you pave the way for anyone to create "untrusted" plugins and hand 
them out as they see fit, but only you can decide "okay, this Triscopic guy is 
doing good work and he's actively trying to support his plugins and I'm happy 
he's not going to create something that will format the hard drive on loading, 
I'll give him a signing key". The public key would live on linkdata.se and I 
would get my own private one from you for signing - a sort of certified 
developer scheme.

This removes the risk of a 3rd party server crash, allows you to create two 
tiers of plugins (trusted and untrusted) and also allows you to move a 
developer from the trusted list at will (for example if you discovered that one 
of my plugins was accidentally ruining some copies of windows somehow and I 
wasn't bothering to fix it). That in turn would prevent LCDHost from 
automatically loading newly untrusted plugins.

Original issue reported on code.google.com by a...@bridgesuk.com on 20 Feb 2011 at 5:41

GoogleCodeExporter commented 8 years ago

Original comment by linkdata...@gmail.com on 24 Feb 2011 at 5:39

GoogleCodeExporter commented 8 years ago
Looks good now.

Original comment by linkdata...@gmail.com on 24 Feb 2011 at 9:03

GoogleCodeExporter commented 8 years ago

Original comment by linkdata...@gmail.com on 25 Feb 2011 at 6:07