--MimeMultipartBoundary
Content-Type: text/plain; charset=us-ascii
Hi
> >In for a penny, in for a pound. If you trust MD5, which bother sending
> >the entire URL over in the ICP? that's just a waste of bandwidth and
> >CPU time. Just send over the md5 signature.... half a :)
>
> Well, agreed. A new ICP query which talked with MD5/HSA sum instead of
> URL to compatible caches would work. But recieving an old ICP query you
> have to do the MD5/HSA hash (cheap on small strings) - not a problem. The
hmm. This opens up a potential denial-of-service attack.... you could
completely trash a cache-machine's CPU by making a few thousand queries
a second. Of course, a few thousand a second would probably kill any
box right now anyway.
Oskar
--MimeMultipartBoundary--
Received on Tue Jul 29 2003 - 13:15:42 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:11:24 MST