forge/Vervis
1
0
Fork 0
Code Pull requests Activity

Rotate actor key once a day by default, instead of once an hour

Browse source 
I'm not sure what the best balance is, but once an hour may end up causing a
lot more key re-fetch requests coming from other servers. I prefer to default
to once a day for now (maybe even once a week) and tighten it later if needed.

Caveat: If an instance key is rotated once a day, there's no
change-key-right-after-toot-deletion thing for deniability. Potentially,
rotation may happen only 24 hours after that deletion, which is much more than
1 hour. On the other hand, it's a whole instance key, not personal key of the
actor.
This commit is contained in:
fr33domlover 2019-02-07 23:28:39 +00:00
parent 8ac559d064
commit fbc9ad2b30
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
config/settings-default.yaml
View file

@ -42,7 +42,7 @@ request-time-limit:
# How often to generate a new actor key for HTTP-signing requests # How often to generate a new actor key for HTTP-signing requests
actor-key-rotation: actor-key-rotation:
amount: 1 amount: 1
unit: hours unit: days
############################################################################### ###############################################################################
# Development # Development