<html><head>
</head>
<body style="margin-bottom:45px">
<div style="font-size: 10pt;"><div dir="auto">Hi,</div><div dir="auto"><span style="font-size: 10pt;"><br></span></div><div dir="auto"><span style="font-size: 10pt;">I want to know if the following security design is provider-independent; that is, whether it still holds even if I don't trust the NDN nodes running repo-ng.</span><br></div><div dir="auto"><br></div><div dir="auto">To make a cap for a file, generate a secret key and nonce, use libsodium to put the file in a box with the key and nonce, and finally, insert the box in a repo with a random name. The name, key, and nonce form a capability for the file; the capability is necessary and sufficient for file retrieval.</div><div dir="auto"><br></div><div dir="auto">This is a lot less work than Tahoe-LAFS has to put in! Would it really work?</div><div dir="auto"><br></div><div id="LGEmailSignatureBox" dir="auto"><div dir="auto" font-size:9pt;"=""><i>Peace,</i></div><div dir="auto" font-size:9pt;"=""><i>~ C.</i></div></div></div>
</body></html>