You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/blog/cstamas/2026/02/ipfs/index.md
+14-1Lines changed: 14 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -172,7 +172,7 @@ The extension introduces three set of components:
172
172
* Maven Lifecycle Participant, that triggers publishing, if needed
173
173
* IPFS transport for Resolver
174
174
175
-
The transport uses URI of format `ipfs:/$namespace[/suffix]`. It is expected that `namespace` is resolvable with IPFS
175
+
The transport uses URI of format `ipfs:/namespace[/suffix]`. It is expected that `namespace` is resolvable with IPFS
176
176
node, so it can be:
177
177
* DNSLinked domain (similar trust model as in Central)
178
178
* IPNS hash, like `k51qzi5uqu5dji6oq9whgjw8c8mkmv45a2ros93ncnluae37i2ayef5cscdoqu` (in this case user would want to make sure that IPNS record comes from one he thinks should come)
@@ -181,6 +181,19 @@ node, so it can be:
181
181
The `suffix` is optional, and is really like a path, that may point inside the Merkle Tree, like in example of Maveniverse
182
182
IPFS where root contains multiple repositories.
183
183
184
+
For publishers, simplest is to create named private key **have same name as namespace**, as that makes administration
185
+
simplest. In case of having multiple publishers for one namespace (like we do in Maveniverse), it is enough to share
186
+
private key via same sane (and secure) means, and whoever has private key can publish to namespace. If private key
187
+
is compromised (or just as part of maintenance), old private key can be tossed and new generated. This step requires
188
+
DNS Link update (as IPNS record changed due new private key). And that's it.
0 commit comments