search

ssbc / ssb-db

A database of unforgeable append-only feeds, optimized for efficient replication for peer to peer protocols
https://scuttlebot.io/
MIT License
1.17k stars 75 forks source link

Remove 'secure' from title #108

Closed jaimegem closed 9 years ago

jaimegem commented 9 years ago

Presenting the assumption of security by implying it in a database written in javascript(with no auth)'s name is abhorrent and, dare I say, snake oily.

pfrazee commented 9 years ago

If you'd like to discuss the security design, and the history of the name, we'll be happy to do so. Otherwise, I'm going to close this issue.

jaimegem commented 9 years ago

::yells "mongodb!" as door slams shut::

pfrazee commented 9 years ago

The "secure" refers to the feed's ability to validate its own integrity in the network, using signatures and a chain of content-hashes. This is not a database for storing secrets - in fact, the opposite, it's for publishing on a global network!

Authentication occurs (counter to your suggestion) via keypair crypto. I'm happy to discuss it more, but I do ask that you don't resort to ad-hominem.

pfrazee commented 9 years ago

Going to close, but if anybody wants to continue discussing this, feel free and I can re-open

dominictarr commented 9 years ago

@jaimegem all writes to secure-scuttlebutt are cryptographically signed into a chain of messages (a "feed"). Messages cannot be removed or altered without invalidating the rest of the feed. There are other senses you could apply the term "secure", but I can assure this project has very little in common with mongodb ;)