Actions
Task #2078
closed
PIB service: register per-cert prefix for cert publishing
Start date:
Due date:
% Done:
100%
Estimated time:
Description
Simply register "/" will cause PIB to "hijack" all Interests to PIB. We need a solution to efficiently publish certificates from PIB.
Updated by Junxiao Shi about 11 years ago
- Subject changed from PIB service: register per cert prefix for cert publishing to PIB service: register per-cert prefix for cert publishing
- Description updated (diff)
- Category set to Security
- Start date deleted (
10/17/2014)
There's a bigger problem: registering only ndn:/ cannot ensure all certificate Interests to be received by PIB service.
If another producer registers a Route with CAPTURE, certificates under that namespace cannot be retrieved.
PIB service can register one Route per certificate (or key), but this would greatly increase start-up delay of PIB service (#1990 requires PIB service to register Routes sequentially).
Having many Routes won't harm the efficiency of NFD, because FIB longest prefix match isn't much slower with many entries.
Updated by Yingdi Yu almost 11 years ago
- Status changed from New to Code review
- % Done changed from 0 to 100
Updated by Yingdi Yu over 10 years ago
- Status changed from Code review to Closed
Actions