[bisq-network/proposals] Host downloads on self-managed server (#72)
notifications at github.com
Thu Feb 14 09:04:57 UTC 2019
I am thinking about proposals and maybe compensation requests. Perhaps the correct form could be a repo where one adds proposals and compensation requests as a markup file. Later creates a pull request and the commit message could contain a sha256 hash of the content (as git's SHA1 is broken collision resistance wise). Bitcoin is using something similar, they are adding a hash256 string of the current state of the work directory (check out their [verify-commits](https://github.com/bitcoin/bitcoin/tree/master/contrib/verify-commits) script). Having those things as repos and not issues it is very easy to move a git repo to other alternatives (like gitlab). Besides most contributors would have a recent copy of the repo anyways, making it naturaly decentralised as git (not github) is.
As for hosting I agree with @ManfredKarrer, but @devinbileck is right that we need a deterministic build. The ideal state is when the binaries are gitian build and signed by as many contributors as possible. Then one can verify the downloaded binary's signiture agains that, making sure it was not altered and the source code is the same as on github.
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the bisq-github