Task #2078
closed
PIB service: register per-cert prefix for cert publishing
Added by Yingdi Yu about 11 years ago.
Updated over 10 years ago.
Description
Simply register "/" will cause PIB to "hijack" all Interests to PIB. We need a solution to efficiently publish certificates from PIB.
- Subject changed from PIB service: register per cert prefix for cert publishing to PIB service: register per-cert prefix for cert publishing
- Description updated (diff)
- Category set to Security
- Start date deleted (
10/17/2014)
There's a bigger problem: registering only ndn:/ cannot ensure all certificate Interests to be received by PIB service.
If another producer registers a Route with CAPTURE, certificates under that namespace cannot be retrieved.
PIB service can register one Route per certificate (or key), but this would greatly increase start-up delay of PIB service (#1990 requires PIB service to register Routes sequentially).
Having many Routes won't harm the efficiency of NFD, because FIB longest prefix match isn't much slower with many entries.
- Status changed from New to Code review
- % Done changed from 0 to 100
- Assignee set to Yingdi Yu
- Status changed from Code review to Closed
Also available in: Atom
PDF
Updated by 
Updated by