<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<br>
<div>
<div>On Apr 7, 2014, at 12:24 PM, "Thompson, Jeff" <<a href="mailto:jefft0@remap.ucla.edu">jefft0@remap.ucla.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif; ">
<div>Hello,</div>
<div><br>
</div>
<div>For an application to receive interests and produce content, it needs to send a signed interest to NRD to register the prefix. How does NRD trust the application's public key? Is there a document that explains the trust procedure for an application to
register a prefix to receive interests?</div>
<div><br>
</div>
<div>I see "" on the wiki, but don't see how NRD will trust the public key of the signed interest.</div>
<div><a href="http://redmine.named-data.net/projects/nrd/wiki/NRD_Prefix_Registration_protocol">http://redmine.named-data.net/projects/nrd/wiki/NRD_Prefix_Registration_protocol</a></div>
</div>
</blockquote>
<div><br>
</div>
Yingdi implemented this part. I think the default policy is to use a trust anchor and as long as the signing key can be verified through a hierarchy rooted at the trust anchor (using hierarchical checking) , then it will be trusted. Of course, the policy
may change in the future based on experience.</div>
<div><br>
</div>
<div>Here's the validator's configuration file for NRD:</div>
<div><br>
</div>
<div>
<div id="wrapper3" style="color: rgb(72, 72, 72); font-family: 'Lucida Grande', verdana, arial, helvetica, sans-serif; font-size: 12px; background-color: rgb(240, 240, 240); ">
<div id="main" class="" style="background-color: transparent; margin: 15px 15px 0px; background-position: initial initial; background-repeat: initial initial; ">
<div id="content" style="width: auto; background-color: rgb(255, 255, 255); margin: 0px 300px 0px 0px; border: 1px solid silver; padding: 6px 10px 10px; z-index: 10; box-shadow: rgba(0, 0, 0, 0.046875) 0px 3px 5px; -webkit-box-shadow: rgba(0, 0, 0, 0.046875) 0px 3px 5px; border-top-left-radius: 7px; border-top-right-radius: 7px; border-bottom-right-radius: 7px; border-bottom-left-radius: 7px; min-height: 600px; background-position: initial initial; background-repeat: initial initial; ">
<div class="wiki wiki-page" style="padding: 15px 10px 10px; ">
<pre style="padding: 6px 10px; border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; margin-right: 1em; margin-left: 1.6em; background-color: rgb(250, 250, 250); border: 1px solid rgb(226, 226, 226); width: auto; overflow-x: auto; overflow-y: hidden; ">rule
{
id "NRD Prefix Registration Command Rule"
for interest
filter
{
type name
regex ^<localhost><nrd>[<register><unregister><advertise><withdraw>]
}
checker
{
type customized
sig-type rsa-sha256
key-locator
{
type name
regex ^[^<KEY>]*<KEY><>*<ksk-.*><ID-CERT>$
}
}
}
rule
{
id "Testbed Hierarchy Rule"
for data
filter
{
type name
regex ^[^<KEY>]*<KEY><>*<ksk-.*><ID-CERT><>$
}
checker
{
type hierarchical
sig-type rsa-sha256
}
}
trust-anchor
{
type file
file-name "testbed-trust-anchor.cert"
}
</pre>
</div>
<div style="clear: both; "></div>
</div>
</div>
</div>
<div id="footer" style="clear: both; border: 0px; font-size: 0.9em; color: rgb(170, 170, 170); padding: 5px; text-align: center; background-color: rgb(238, 238, 238); margin: 10px; font-family: 'Lucida Grande', verdana, arial, helvetica, sans-serif; ">
<div class="bgl"></div>
</div>
</div>
<div>Lan<br>
<blockquote type="cite">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif; ">
<div><br>
</div>
<div>Thank you,</div>
<div>- Jeff T</div>
</div>
_______________________________________________<br>
Nfd-dev mailing list<br>
<a href="mailto:Nfd-dev@lists.cs.ucla.edu">Nfd-dev@lists.cs.ucla.edu</a><br>
http://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev<br>
</blockquote>
</div>
<br>
</body>
</html>