stebalien changed the topic of #ipfs to: Heads Up: To talk, you need to register your nick! Announcements: go-ipfs 0.5.1 and js-ipfs 0.43.1 are out! Get them from dist.ipfs.io and npm respectively! | Also: #libp2p #ipfs-cluster #filecoin #ipfs-dev | IPFS: https://github.com/ipfs/ipfs | Logs: https://view.matrix.org/room/!yhqiEdqNjyPbxtUjzm:matrix.org/ | Forums: https://discuss.ipfs.io | Code of Conduct: https://git.io/vVBS0
jcea has joined #ipfs
dethos has quit [Ping timeout: 264 seconds]
catonano_ has joined #ipfs
catonano has quit [Ping timeout: 240 seconds]
catonano_ is now known as catonano
daMaestro has joined #ipfs
gde33 has joined #ipfs
Ai9zO5AP has quit [Ping timeout: 240 seconds]
i9zO5AP has joined #ipfs
reit has joined #ipfs
_jrjsmrtn has joined #ipfs
__jrjsmrtn__ has quit [Ping timeout: 264 seconds]
mmoya has quit [Ping timeout: 244 seconds]
tryte has quit [Ping timeout: 240 seconds]
baojg has joined #ipfs
tryte has joined #ipfs
mmoya has joined #ipfs
KempfCreative has joined #ipfs
user_51_ has joined #ipfs
user_51 has quit [Ping timeout: 240 seconds]
spinza has quit [Ping timeout: 240 seconds]
jrt is now known as Guest10760
jrt has joined #ipfs
zeden has joined #ipfs
Guest10760 has quit [Ping timeout: 265 seconds]
spinza has joined #ipfs
jcea has quit [Quit: jcea]
Belkaar has quit [Ping timeout: 265 seconds]
Belkaar has joined #ipfs
Belkaar has joined #ipfs
zeden has quit [Quit: WeeChat 2.9]
KempfCreative has quit [Ping timeout: 240 seconds]
dqx_ has quit [Ping timeout: 240 seconds]
IRCsum has joined #ipfs
IRCsome has quit [Remote host closed the connection]
IRCsum has quit [Remote host closed the connection]
IRCsum has joined #ipfs
joocain2_ has quit [Ping timeout: 240 seconds]
joocain2 has joined #ipfs
RzR has quit [Ping timeout: 258 seconds]
IRCsum has quit [Ping timeout: 260 seconds]
IRCsum has joined #ipfs
RzR has joined #ipfs
jesse22 has joined #ipfs
dqx_ has joined #ipfs
dqx_ has quit [Max SendQ exceeded]
dqx_ has joined #ipfs
reit has quit [Quit: Leaving]
reit has joined #ipfs
maggotbrain has quit [Read error: Connection reset by peer]
stoopkid has quit [Quit: Connection closed for inactivity]
zeden has quit [Quit: WeeChat 2.9]
zeden has joined #ipfs
maggotbrain777 has quit [Remote host closed the connection]
maggotbrain has joined #ipfs
Jesin has quit [Quit: Leaving]
Jesin has joined #ipfs
Mateon1 has quit [Quit: Mateon1]
Mateon1 has joined #ipfs
SchrodingersScat has quit [Ping timeout: 240 seconds]
SchrodingersScat has joined #ipfs
xval[m] has joined #ipfs
thibaultmol[m] has joined #ipfs
<thibaultmol[m]>
Q: either I'm not finding the correct info. But it would appear that there's no builtin system to decrypt files straight from the file url?
<thibaultmol[m]>
(Mega has a system where you just have the url of the file and then followed by ?key=passcodeForTheFile which descrypts it)
jcea has joined #ipfs
jcea has quit [Ping timeout: 240 seconds]
jcea has joined #ipfs
<aschmahmann[m]>
thibaultmol: that's correct, there is no built in encryption/decryption of files in IPFS (except for data in transit). However, you're free to build this kind of system yourself by encrypting the data before you put it in IPFS and then making a webpage that does the decryption based on the URL fragment (thing after the `#`).
<aschmahmann[m]>
For example, you have a webpage with CID QmPage and a file QmFile. You could use IPFS locally and go to `localhost:8080/ipfs/QmPage#data=QmFile;key=thekey`. The webpage could then fetch QmFile using js-ipfs or a local gateway and decrypt it with your key.
<aschmahmann[m]>
Note: once you've decrypted the data you still need to figure out how you want to display it to the user.
hexa- has quit [Read error: Connection reset by peer]
hexa- has joined #ipfs
<thibaultmol[m]>
in my usecase it would have to actually return the full image with the correct mimetype and such. (so when I link that url. any application that can handle a .jpg or .png should be able to handle it.
<thibaultmol[m]>
I guess what I'm asking is kind of hard/impossible
<thibaultmol[m]>
(application can't be changed to allow for ipfs to work. it should just work without needing modification)
xurzua has quit [Quit: xurzua]
<aschmahmann[m]>
If everything needs to follow browser semantics exactly and you can't change the application aside from moving the URL you're going to have a rough time. However, if you're allowed to run another program on your local machine then you could have that program serve as a proxy gateway that does the decryption for you (e.g. Application <-> Decryption Gateway <-> IPFS)
<thibaultmol[m]>
on the local machine that's not really an option.
<thibaultmol[m]>
(use case for me is mainly for urls to store in openstreetmap)
<thibaultmol[m]>
It should be able to, for example: you have an like Yelp. And it shows images of reviews. On that persons phone it should just load those images when stored on IPFS.
<thibaultmol[m]>
But I suppose it doesn't matter if they are encrypted or not then. Because those urls are all going to be public anyway
<thibaultmol[m]>
Was mainly just curious about the possibility I suppose
maxzor has quit [Remote host closed the connection]
<swedneck>
well you're going to have to run code locally no matter what
<swedneck>
otherwise the encryption is pointless, if the server gets to decrypt it
<swedneck>
if you do the initial suggestion of having a website, but just use it via IPNS, it'd be essentially the same thing as what mega does
<thibaultmol[m]>
Yeah, the more I thought it the less sense it made to try and encrypt it
<swedneck>
`decryptmyipfs.tld.ipns.localhost:8080/#Qmfoobar/encryptionkey` ought to work
dqx_ has quit [Ping timeout: 264 seconds]
dethos has quit [Ping timeout: 260 seconds]
<swedneck>
* something like `decryptmyipfs.tld.ipns.localhost:8080/#Qmfoobar/encryptionkey` ought to work
Ecran10 has quit [Quit: Going offline, see ya! (www.adiirc.com)]
<aschmahmann[m]>
Swedneck: Why would you need IPNS? Of course you can use it so you can keep updating your decryption program, but it's not strictly necessary.
<swedneck>
to make the URL less horrible
<aschmahmann[m]>
Ah sure, using DNSLink for nice names 👍️
<swedneck>
having two CIDs and an encryption key in the URL is impressively long
<swedneck>
and this is why splitting the DNSlink namespace from IPNS cannot come soon enough
<swedneck>
i keep confusing the two
<aschmahmann[m]>
btw if anyone plans on implementing something like this they'd need to be careful about cross site attacks because the domain is now decryptmyipfs.tld.ipns.localhost and so all files loaded through that page have access to the same data. i.e. please don't decrypt and run javascript this way or you will be sad 😿
<swedneck>
i mean the same'd be true no matter if you use IPNS/DNSLink or not, surely?
<swedneck>
unless you run a clientside gateway that supports CIDs as subdomains, i guess
<aschmahmann[m]>
yep, it's true whether you use IPFS, IPNS or DNSLink to get that first page. It's about the one page loading other pages strategy
<swedneck>
* unless you run a clientside decryption gateway that supports CIDs as subdomains, i guess
test[m] has joined #ipfs
pecastro has quit [Ping timeout: 256 seconds]
jesse22 has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]