mquezadav/repositorium — Issue #30: =Threshold Security=
Author: jyby
Created: 2011-10-18 20:26:31+00:00
State: open
Labels: Admin Interface, Feature Request, security

* Add a parameter $t$ to each repository,
- let the repository administrator choose and edit the value of
$t$, by default set to $1$ (i.e. no threshold)
- if less than $t$ documents match a query,
- the request is refused, meaning that
- no challenge is sent
- no document is delivered
* Reason:
- the subset given in answer to a query is a random subset, so
that to make exponentially expensive to download *all*
documents of a repository (and duplicate it elsewhere).
- by using queries precise enough (this can be automatized), one
attacker can make disappear the randomness (unless many
documents have exactly the same tags, but then the search
needs to be improved).