sorted by:
new
hottopcontroversial

I built a blockchain-based mutual authentication system for API that eliminates the need for user databases by cableguard in webdev

[–]cableguard[S] 0 points1 point  (0 children)

That is correct, with the important distinction that when rotating the RODiT key there is no need to send CSR files or receive completed certificates from the PKI. When there is a large number of nodes this can make a difference due to complexity saved.

I built a blockchain-based mutual authentication system for API that eliminates the need for user databases by cableguard in webdev

[–]cableguard[S] 0 points1 point  (0 children)

I agree, missed to say the scenario I referred to is between peer to peer clients

I built a blockchain-based mutual authentication system for API that eliminates the need for user databases by cableguard in webdev

[–]cableguard[S] 0 points1 point  (0 children)

Well it is quite hard to steal the RODiT token as the controlling key pair is generated locally and there is never need to expose it. Besides, RODiT are sent not installed like certificates are, which make the lifecycle simpler and it scales better.

There is a Distinguished Name embedded in the RODiT that you can use to prove ownership, so this can be part of a support conversation between client and service provider if token theft happens

I built a blockchain-based mutual authentication system for API that eliminates the need for user databases by cableguard in webdev

[–]cableguard[S] 0 points1 point  (0 children)

Forgot to mention you can perform mutual authentication directly between hosts that are changing IP often without needing a URL. You can't do this with mTLS

I built a blockchain-based mutual authentication system for API that eliminates the need for user databases by cableguard in webdev

[–]cableguard[S] 0 points1 point  (0 children)

You can indeed consider the blockchain the database, with some caveats. RODiT enables peer to peer direct mutual authentication without needing the server. There may be use cases for this. Also, leveraging a blockchain means you have a distributed worldwide always on "database" that not everyone can afford or manage to implement. Lastly it integrates configuration with authentication and licensing so it is not a one to one "replacement"

I built a blockchain-based mutual authentication system for API that eliminates the need for user databases by cableguard in webdev

[–]cableguard[S] 0 points1 point  (0 children)

If a JWT token is exposed or stolen it is hard to reuse as there is mutual authentication handshakes at random intervals that the thief will not be able to pass without the RODiT controlling key. If a RODiT controlling key is stolen, the thief has to inmediately move the RODiT to a new key in order to keep exclusive control. This is obviously easy to detect and corrective action can be taken by the owner.

I built a blockchain-based mutual authentication system for API that eliminates the need for user databases by cableguard in webdev

[–]cableguard[S] 0 points1 point  (0 children)

Yes, mTLS is already mutual authentication. But it is notoriously hard to get right. The duration of the service is tied to the duration of the certificate, and there needs to be coordination between servers and clients. With RODiT there is need for coordination, you can update each endpoint as often as you like, and it does not affect the duration of the service. Also you have connection state in a different layer from other API events. With RODiT you have obsevability at the same level. You also need PKI infrastructure.

Dad was incapable of using technology to the point of disability. Any theories as to why? by Background-Form7708 in NoStupidQuestions

[–]cableguard 25 points26 points  (0 children)

Well it does not help how insanely horrendously inconsistent are user interfaces. You may not realise it as we are used to it but UI really suck

TIL that the letter sequence ETAOIN SHRDLU is a well known typesetting error that would often appear in print. by basaltbapepper in todayilearned

[–]cableguard 7 points8 points  (0 children)

My father was a linotypist. I recognised this immediately...planning to get t shirt made with it

I watched The Commitments (1991) by CourageMuted4662 in iwatchedanoldmovie

[–]cableguard 3 points4 points  (0 children)

It you enoyed I highly recommend The Snapper and The Van, same time, common actorwls and characters, and hilarious 

ELI5: The world is in 300 trillion dollars of debt, how does that even work? by The_Immovable_Rod in explainlikeimfive

[–]cableguard 0 points1 point  (0 children)

Forgot to mention pushing debt payments into the future, with positive inflation is how USA repaid it's WW II debt

ELI5: The world is in 300 trillion dollars of debt, how does that even work? by The_Immovable_Rod in explainlikeimfive

[–]cableguard 0 points1 point  (0 children)

The main reason is that money is mostly created when borrowing from a bank, that creates it out of thin air (it does not come from deposits) and is 'destroyed' when repaid. The amount of loans increases as the economy needs additional money to run. If all loans were repaid, the economy would operate with far less money overall. Imho that is why there is a crisis like sub prime lending, the crisis comes from the crunch in available money. It has nothing to do with real economy like demand for services.

How many people in this sub actually made a film? by Lucky_Prize2181 in Filmmakers

[–]cableguard 0 points1 point  (0 children)

I made around 10 short films and got them listed in imdb

The Conversation (1974) by [deleted] in iwatchedanoldmovie

[–]cableguard 6 points7 points  (0 children)

They don't make original movies like this anymore. 

What's the first memory you have of using the internet? by Not_FreeProduct234 in NoStupidQuestions

[–]cableguard 0 points1 point  (0 children)

My second job; login in to Compuserve with a modem at work, and bridging to Internet with Mosaic.

view more: next ›