<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
<div>
<div style="direction: inherit;"><span style="background-color: rgba(255, 255, 255, 0);">Hi all,</span>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br class="">
</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);">We talked with Zhehao today about key rollover and he mentioned that there was a proposal from Yingdi. However, I couldn’t find it. Does anyone know where to find it?</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);">Any links on the materials covering the issue would be appreciated as well.</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br class="">
</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);">Currently, in <i class="">ndncon</i> I didn’t plan for writing any special roll-over mechanism/module and wanted to keep things simple (maybe not in a very elegant way - that’s what triggered
our discussion about rollover with Zhehao today).</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br class="">
</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);">My idea right now is to have <i class="">ndncon</i> producer to generate new instance certificate every hour. This certificate is installed in the instance keychain, but is not set as a default
certificate yet. Media stream packets are always signed with the default certificate. Once new certificate is generated, it is used for signing low-rate data generated by the discovery library. That way, consumers will be able to receive discovery data signed
with the new certificate, fetch it according to the certificate chain, verify and have it cached locally. After some delay (60 seconds for instance) producer sets newly generated certificate as a default for the instance keychain and media data packets now
will get signed with the new certificate. This won’t trigger fetching certificate on consumer sides as they already have this certificate fetched when they received discovery data earlier. That way, verification won’t trigger delays for the time-sensistive
media streaming data.</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br class="">
</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);">I’m reaching out for your thoughts on this approach. How does this conflict with the key roll-over concept and whether we want to proceed with this approach (for now/for good)?</span></div>
<div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br class="">
</span></div>
<div class="">
<div class="">
<div class="" style="word-wrap: break-word;">
<div class="" style="word-wrap: break-word;">
<div class="" style="word-wrap: break-word;">
<div class="" style="word-wrap: break-word;">
<div class="" style="orphans: auto; widows: auto; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; word-wrap: break-word;">
<span style="background-color: rgba(255, 255, 255, 0);">Thanks, </span></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div style="direction: inherit;"><br>
</div>
<span style="background-color: rgba(255, 255, 255, 0);">-- <br>
</span>
<div class="gmail_signature">
<div dir="ltr">
<div dir="ltr"><span style="background-color: rgba(255, 255, 255, 0);">Peter Gusev</span>
<div><span style="background-color: rgba(255, 255, 255, 0);"><a href="mailto:peter@remap.ucla.edu">peter@remap.ucla.edu</a><br>
</span>
<div><i><a href="tel:+1%20213%205872748" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="4/2" style="background-color: rgba(255, 255, 255, 0);">+1 213 5872748</a></i></div>
<div><i style="background-color: rgba(255, 255, 255, 0);">peetonn_ (skype)</i></div>
<div>
<div><br>
</div>
</div>
</div>
<div>
<div>Software Engineer/Programmer Analyst @ REMAP UCLA</div>
<div><br>
</div>
<div>Video streaming/ICN networks/Creative Development</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>