summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorJoey Hess <joeyh@joeyh.name>2016-09-16 13:21:34 -0400
committerJoey Hess <joeyh@joeyh.name>2016-09-16 13:21:34 -0400
commit281bc63549a49c173b85d7b80b4b703aab9d3a52 (patch)
tree7ae0a56b07a5082edfaaf40fcc1428a30db4a8bf
parente1f847b5fb486e67dd88fce5d7db092855ea0e11 (diff)
downloadkeysafe-281bc63549a49c173b85d7b80b4b703aab9d3a52.tar.gz
todo
-rw-r--r--TODO3
1 files changed, 3 insertions, 0 deletions
diff --git a/TODO b/TODO
index 39dad6c..f2fa3b1 100644
--- a/TODO
+++ b/TODO
@@ -20,6 +20,9 @@ Later:
and rejects passwords that would cost less than $N to crack at current
rates. This should add a combo box to the password entry form in the
GUI to let the user adjust the $N there.
+* In backup, only upload to N-1 servers immediately, and delay the rest
+ for up to several days, with some uploads of chaff, to prevent
+ collaborating evil servers from correlating related shards.
* Add some random padding to http requests and responses, to make it
harder for traffic analysis to tell that it's keysafe traffic.