Per-Entity Metadata Working Group

[Christopher Hubing <>]

On Thu, 13 Oct 2016, Cantor, Scott wrote:

> > I wanted to demonstrate that is possible to create a massively scalable
> > app in a short period of time with little infrastructure to manage. The
> > metadata isn't signed, but that could be done rather easily I would think.
>
> If you mean online signing that's pretty much a non-starter for security 
> reasons if nothing else, so once you take that out of the picture, it 
> just doesn't take anything even that complicated. All you need is Apache 
> and some files, as people have demonstrated.

Naw, it can be pre-signed.

> What I noted on the last call was that CDNs seem to have a model that is 
> very much specific to browsers: they don't care about HA for any given 
> IP address, only that one of the addresses the browser gets is working. 
> That model doesn't work for most non-browser HTTP clients, so I'm not 
> sure any CDN-like approach will work terribly well in practice unless 
> the failures (and by failure I don't mean actual outage but even just 
> taking nodes out of service aggressively) are very rare.

Ah, so the concern is that a node goes away in the middle of serving 
a metadata request to the client. And, the client would not recover or 
retry the request?


> -- Scott