Closed g-a-v-i-n closed 5 years ago
@c-johnson @jtobin I'm not 100% sure if we want to use an npm module for sharding because I'm biased towards not using 3rd party modules. I'm not sure if its a big deal in this case.
Looks fine to me. If the shard algorithm is simple / self-contained enough you could just copy it in plaintext. If not, we're already using dependencies (which will still get audited?), so it seems fine.
As a sidenote, we should probably remove the ^ from version numbers in package.json and require explicit minor versions before release.
The only thing that comes to mind for me with the 2/3 vs k/n discussion is that there are other processes / documentation that were designed around the 2/3 approach. I expect @msutherl can weigh in on the complexity of changing this, but worth noting.
Great thing about 2/3 is: split 384 bit key into 3 parts, each shard is 2/3, yr done, no math. That said, I’m really not at all afraid of SSS either. It’s the producer’s call.
Sent from my iPhone
On Sep 19, 2018, at 8:28 AM, Galen Wolfe-Pauly notifications@github.com wrote:
The only thing that comes to mind for me with the 2/3 vs k/n discussion is that there are other processes / documentation that were designed around the 2/3 approach. I expect @msutherl can weigh in on the complexity of changing this, but worth noting.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.
Who is the person responsible for making this decision?
(Check out #11 for a simple 2-3 alternative to this one.)
We don’t need k/n sharding for the ceremony. Short of wanting to include k/n sharding in Bridge (which to my knowledge it is not), we don’t need to have k/n.
On Sep 20, 2018, at 1:35 AM, Jared Tobin notifications@github.com wrote:
(Check out #11 for a simple 2-3 alternative to this one.)
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.
Merged #11, need to address the fact owner.seed
isn't the entropy ticket.
Closing this as it went in with #18.