von / PerProxy

A python-based proxy that uses Perspectives to detect and thwart SSL MITM attacks.
7 stars 2 forks source link

Support Setting Different Security Policies #37

Closed danwent closed 13 years ago

danwent commented 13 years ago

Most obvious is to be able to set different values for quorum and quorum duration

From Checker.py: Default policy is quorum of n-1 and quorum duration of 1 day

von commented 13 years ago

Agreed. With 4 notaries, this wasn't a big of an issue, but I'm noticing with 8, N-1 is more fragile since it's a bigger percentage. (Hmmm, I wonder if percentage might be a good way to express quorum?)

danwent commented 13 years ago

On Fri, Jul 15, 2011 at 4:33 AM, von reply@reply.github.com wrote:

Agreed. With 4 notaries, this wasn't a big of an issue, but I'm noticing with 8, N-1 is more fragile since it's a bigger percentage. (Hmmm, I wonder if percentage might be a good way to express quorum?)

Yes, percentage is how the FF plugin works. It defaults it to 75%

dan

Reply to this email directly or view it on GitHub: https://github.com/von/PerProxy/issues/37#issuecomment-1579123

Dan Wendlandt
650-906-2650
http://www.cs.cmu.edu/~dwendlan/
4250 El Camino Real, Apt A306
Palo Alto, CA 94306
von commented 13 years ago

On Fri, Jul 15, 2011 at 9:38 AM, danwent < reply@reply.github.com>wrote:

Yes, percentage is how the FF plugin works. It defaults it to 75%

I assume that means 75% of all Notaries known, not just those that responded?

danwent commented 13 years ago

On Fri, Jul 15, 2011 at 9:58 AM, von reply@reply.github.com wrote:

On Fri, Jul 15, 2011 at 9:38 AM, danwent < reply@reply.github.com>wrote:

Yes, percentage is how the FF plugin works.  It defaults it to 75%

I assume that means 75% of all Notaries known, not just those that responded?

exactly. you don't want to give the attack a chance to influence the results by selectively dropping notary replies.

dan

Reply to this email directly or view it on GitHub: https://github.com/von/PerProxy/issues/37#issuecomment-1581146

Dan Wendlandt
650-906-2650
http://www.cs.cmu.edu/~dwendlan/
4250 El Camino Real, Apt A306
Palo Alto, CA 94306
von commented 13 years ago

Pushed to master.

von commented 13 years ago

Bug fix related to quorum_duration and quorum_percentage needing to be cast to ints: e52e0de