address Nathan Wilcox's concerns about "Tahoe and the browser security model" #366

New Issue

zooko · 2008-03-23T02:10:11Z

zooko commented

2008-03-23 02:10:11 +00:00

[//pipermail/tahoe-dev/2008-February/000404.html On the mailing list] Nathan Wilcox posted some general concerns about how Tahoe's WUI relies on a security model which is different than the one almost everyone thinks of when they think of web browsers and URLs.

It is through such cracks between people's models that security failures slip (according to Ross Anderson's book Security Engineering).

If we could address these concerns, at least by documentation, for Tahoe v1.0 I would feel better.

[//pipermail/tahoe-dev/2008-February/000404.html On the mailing list] Nathan Wilcox posted some general concerns about how Tahoe's WUI relies on a security model which is different than the one almost everyone thinks of when they think of web browsers and URLs. It is through such cracks between people's models that security failures slip (according to Ross Anderson's book *Security Engineering*). If we could address these concerns, at least by documentation, for Tahoe v1.0 I would feel better.

zooko added the

labels 2008-03-23 02:10:11 +00:00

zooko added this to the 1.0.0 milestone 2008-03-23 02:10:11 +00:00

zooko commented

2008-05-05 21:08:36 +00:00

Milestone 1.0.1 deleted

zooko added this to the 1.1.0 milestone 2008-05-05 21:08:36 +00:00

warner modified the milestone from 1.1.0 to 1.2.0

2008-05-29 22:37:40 +00:00

zooko added

code-frontend-web

and removed

unknown

labels 2008-08-19 18:01:01 +00:00

zooko modified the milestone from 1.5.0 to eventually

2009-06-30 12:39:37 +00:00

davidsarah commented

2009-10-28 07:04:28 +00:00

If you like this bug, you might like #127, #615, and #821.

davidsarah commented

2010-01-17 14:55:55 +00:00

... and #907.

zooko commented

2010-09-18 17:51:04 +00:00

I wonder what process we would use to close this ticket. Maybe: have Nathan Wilcox sign off on it saying "I am no longer concerned about the impedance mismatch between the Tahoe-LAFS security model and the web security model?". I doubt that this would ever happen (at least not for another 5 or 10 years). So maybe we should try to narrow this ticket. Could we name some specific issues that we could verify whether or not they are still a problem and then close the ticket if they are fixed? Probably not.

Nathan: How about this: write a document for the user explaining the dangers of mixing the web security model with Tahoe-LAFS, and then close this ticket. Here is a "seed" document which you could use as a starter:

source:trunk/docs/known_issues.txt

If that document already conveys your concerns to the user, then please close this ticket. If not, please write a document which does do so, or else post a comment on this ticket explaining what it would take to write such a document, or proposing some other process by which we can make forward progress on this ticket.

Thank you!

I wonder what process we would use to close this ticket. Maybe: have Nathan Wilcox sign off on it saying "I am no longer concerned about the impedance mismatch between the Tahoe-LAFS security model and the web security model?". I doubt that this would ever happen (at least not for another 5 or 10 years). So maybe we should try to narrow this ticket. Could we name some specific issues that we could verify whether or not they are still a problem and then close the ticket if they are fixed? Probably not. Nathan: How about this: write a document for the user explaining the dangers of mixing the web security model with Tahoe-LAFS, and then close this ticket. Here is a "seed" document which you could use as a starter: source:trunk/docs/known_issues.txt If that document already conveys your concerns to the user, then please close this ticket. If not, please write a document which does do so, or else post a comment on this ticket explaining what it would take to write such a document, or proposing some other process by which we can make forward progress on this ticket. Thank you!

nejucomo was assigned by zooko

2010-09-18 17:51:04 +00:00

nejucomo commented

2012-08-27 23:05:02 +00:00

I will close this ticket because it has vague criteria. Instead, let's focus on more specific issues. A similar ticket not mentioned above is #1665.

Sign in to join this conversation.