alright here it is, my hit-piece on CARs in atproto, with a big ecosystem survey
Post
pckt.blogWar on CARs - Data service diariesA widespread authenticity problem in the Authenticated Transfer Protocol, from real-world use of Content-Addressible aRchives
pretty similar to the relay comparison that @iame.li did a couple months ago. with a bit of attention/coordination I don't think it will be that big of a lift to nail these down. getting the details nailed down in the IETF text first feels like the right sequencing.
streamplace.github.ioatproto relay conformance — invalid firehose data
yeah, if the reached-for libraries trend toward DASL (with actually-checked CID behaviour, which isn't technically required from the library itself in DASL) then hopefully the safety story gets better. i don't think the footgun will ever go away but maybe a kind of herd immunity works out
0 reposts1 like