mirror of
https://github.com/twisterarmy/twister-core.git
synced 2025-01-22 04:24:17 +00:00
Update TODO.md
This commit is contained in:
parent
db24ccc635
commit
be33ed3c27
28
TODO.md
28
TODO.md
@ -1,28 +1,38 @@
|
||||
Security
|
||||
================
|
||||
|
||||
- Encrypt user_data (which contains all DMs)
|
||||
|
||||
- Test wallet encrypt to see if it still works from original bitcoin implementation and what
|
||||
are the implications to our code.
|
||||
|
||||
- Rescan directmessages after importing a privatekey (importprivkey)
|
||||
- Move all crypto to javascript, store only encrypted version of the privatekey (which would be
|
||||
decrypted only in browser memory). getposts may obtain all DMs encrypted to browser, another
|
||||
newpostmsg needs to be provided to receive posts with signature field added.
|
||||
|
||||
- Check libtorrent's limitation on the number of pieces (max_pieces in piece_picker.hpp = 1<<19)
|
||||
Since post number is constrained by max of 288 posts per day in average, that means we have 5 years
|
||||
to think about it (for the really heavy users).
|
||||
|
||||
Features
|
||||
================
|
||||
- Besides increasing the maximum number of pieces, a more pressing issue to save bandwidth and
|
||||
torrent download time would be to define the first piece to download/store locally. People don't
|
||||
need to maintain the entire post history for everybody they follow, they could just keep the last
|
||||
ones. This has to be implemented.
|
||||
|
||||
- Move all crypto to javascript, store only encrypted version of the privatekey (which would be
|
||||
decrypted only in browser memory). getposts may obtain all DMs encrypted to browser, another
|
||||
newpostmsg needs to be provided to receive posts with signature field added.
|
||||
|
||||
- Store a dht resource "publickey" containing not only the public key itself but also information
|
||||
needed to validate it by a lightweight client. That includes: block hash, block height and partial
|
||||
merkle tree inside that block. This resource propagation cannot be sent right after user
|
||||
registration for obvious reasons (no block yet, other nodes wouldn't accept the signed dht put).
|
||||
|
||||
- Share images
|
||||
|
||||
Kill bugs
|
||||
================
|
||||
- Rescan directmessages after importing a privatekey (importprivkey)
|
||||
|
||||
- Check libtorrent's limitation on the number of pieces (max_pieces in piece_picker.hpp = 1<<19)
|
||||
Since post number is constrained by max of 288 posts per day in average, that means we have 5 years
|
||||
to think about it (for the really heavy users).
|
||||
|
||||
- Implement the mention forwarding mechanism discussed in the paper so user don't need to do polling
|
||||
and can also be sure to receive all mentions.
|
||||
|
||||
@ -39,8 +49,6 @@ of his own torrent)
|
||||
- Estimate number of online followers by quering the "tracker" resource (implement a value within
|
||||
this resource to report the number of torrent peers)
|
||||
|
||||
- Define and enforce html directory to serve from. Do installation scripts.
|
||||
|
||||
- Don't accept dht "post"+k if k violates the validatePostNumberForUser() rule.
|
||||
|
||||
- Implement -secdatadir= parameter to store sensitive data (wallet, dm) in a separated dir.
|
||||
|
Loading…
x
Reference in New Issue
Block a user