aboutsummaryrefslogtreecommitdiffstats
path: root/src/store.rs
Commit message (Collapse)AuthorAgeFilesLines
* Harden identity key permissions, atomic writes, and HTTP methodmurilo ijanc2026-03-251-1/+2
| | | | | | | | | - Write identity.key with mode 0600 to prevent other users from reading the Ed25519 private seed - Use destination filename in atomic_write temp path to avoid collisions between concurrent writes to different files - Reject HTTP methods other than GET/HEAD with 405 - Return "Hello Tesseras World" on GET /
* Fix critical data integrity and security issuesmurilo ijanc2026-03-251-7/+19
| | | | | | | | | | - Atomic writes in store (write-to-temp + rename) to prevent corruption on crash - Validate DHT results against requested content hash to reject forged data from malicious nodes - Limit protocol line size to 128 KiB on Unix socket to prevent memory exhaustion - Use saturating_add for TTL expiry to prevent u64 overflow
* Initial commit: tesseras-paste decentralized pastebinmurilo ijanc2026-03-251-0/+262
DHT-backed encrypted pastebin with two binaries (tp/tpd), XChaCha20-Poly1305 encryption, content-addressed storage, and Unix socket + HTTP interfaces.