• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号

cloudflarearchive/ipfs-ext: Validates IPFS resources served by Cloudflare's ...

原作者: [db:作者] 来自: 网络 收藏 邀请

开源软件名称:

cloudflarearchive/ipfs-ext

开源软件地址:

https://github.com/cloudflarearchive/ipfs-ext

开源编程语言:

JavaScript 94.8%

开源软件介绍:

IPFS Gateway Validator

Validates IPFS resources served by Cloudflare's gateway.

This repo contains the source code for a browser extension that intercepts requests to IPFS gateways and distinguished domain names, and cryptographically verifies that the server's response is valid. It currently only works in Firefox because Firefox is the only browser that supports the webRequest.filterResponseData() API.

Currently, it intercepts any request to:

What are ipfs-sec domains for?

ipfs-sec domains have several security and usability properties that make them ideal for building trust-minimizing web apps.

Unlike requests served by a communal or local gateway, ipfs-sec domains are considered by the browser as a distinct origin. This means they have a safe place to store cookies and local data, can request special permissions from the user, and can run service workers free from manipulation by malicious third-party documents.

Web apps with an ipfs-sec domain can be served by a CDN to reduce their operational cost and load time through caching, as well as provide protection from DDoS attacks. However, unlike with a traditional web app, the website owner is assured that the CDN cannot maliciously modify his content. The user could also be assured that the website owner hasn't maliciously modified their own web app through the use of a Certificate Transparency-like system for DNS, though this is not currently implemented.

Finally, ipfs-sec domains are backwards-compatible. Users that don't want to install the extension will be served the same content as users that do have the extension, they just won't get the security benefits.

You can read more about ipfs-sec, including how to create an ipfs-sec website, in our blog post about end-to-end integrity.

How do I build the extension?

npm run build

Notes

  • Only the SHA-256 hashing algorithm is currently supported for content IDs.
  • Storing IPFS hashes in TXT records is supported, but the name for the TXT record must be prefixed with "_dnslink".



鲜花

握手

雷人

路过

鸡蛋
该文章已有0人参与评论

请发表评论

全部评论

专题导读
热门推荐
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服(服务时间 9:00~18:00)

在线QQ客服
地址:深圳市南山区西丽大学城创智工业园
电邮:jeky_zhao#qq.com
移动电话:139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap