top | item 44122863

(no title)

shwouchk | 9 months ago

signing it is effectively the same thing. question is how to prove that what you hashed is what was there?

discuss

order

chii|9 months ago

you can't, because unless you're not the only one with a copy, your hash cannot be verified (since both hash and claim comes from you).

One way to make this work is to have a mechanism like bitcoin (proof of work), where the proof of work is put into the webpage itself as a hash (made by the original author of that page). Then anyone can verify that the contents wasn't changed, and if someone wants to make changes to it and claim otherwise, they'd have to put in even more proof of work to do it (so not impossible, but costly).

notpushkin|9 months ago

I think there was a way to preserve TLS handshake information in a way that something something you can verify you got the exact response from the particular server? I can’t look it up now though, but I think there was a Firefox add-on, even.

fragmede|9 months ago

what if instead of the proof of work being in the page as a hash, that the distributed proof of work is that some subset of nodes download a particular bit of html or json from a particular URI, and then each node hashes that, saves the contents and the hash to a blockchain-esque distributed database. Subject to 51% attack, same as any other chain, but still.