Re: [Wpack] About content-based origins

[Martin Thomson <[e-mail]>]

On Wed, Mar 25, 2020, at 04:47, Ted Hardie wrote:
> I note that you did not include "hashing is a key element of 
> identification" in the key concepts here, despite it being pretty 
> prominent in the draft. Is it something you consider fundamental here, 
> or is it an approach to demonstrate a method of achieving the two 
> desiderata above?

Exemplar only.  I think that signatures offer some greater flexibility, but I wanted to show how this might work without them first.

> Have I missed something here? If I have not, then this approach makes a 
> trade-off that limits its utility in ways that make peer-to-peer usage 
> of the approach problematic for use cases I personally care about it. 
> Others, of course, may make other assessments of that trade-off.

No, that's an accurate assessment.  The requirement to defer attribution of information to a particular entity is part of that trade-off.  In preparing slides, I think that the question of how to manage attribution is going to be an important one.

I think that Jeffrey is proposing that perhaps we can attribution of the sort that people care about, without also having attribution of the sort that the web security model cares about.  That might be a cool way to split this.  That is, you can tell people that this is example.com, but maintain segregation and give example.com the right of refusal for the associated content and state at the point you come back online.