#ls2 (irc2p) | #ls2 Proposal 168 review here 8 PM UTC Tues. Dec. 3

orignal I might be late today due the stationry holiday in canada

zlatinb eyedeekay1: muwire.com/downloads/I2P-1.7.0.dmg

zlatinb and newsxml updated

orignal please do it wihtout me. I have something urgent to do

zzz ok, thanks for letting us know

zlatinb did the flippening just happen?

zlatinb I'm seeing people downloading the mac torrent

zzz I haven't heard back from echelon, so my guess is eyedeekay1 yes, echelon no

eyedeekay1 I just pulled translations and updated my news a few minutes ago, I don't think ech updated yet

zlatinb who's the primary?

eyedeekay1 Me

eyedeekay1 Wait no ech

zlatinb hmm

zlatinb still surprising that so many people are hitting the backup

zlatinb actually not surprising given most ppl don't have the tunnel testing fix

zzz I think there's also some bots or bot-like humans that download everything on postman

eyedeekay1 files.i2p-projekt.de and download.i2p2.de are updated

eyedeekay1 zlatinb I don't have your DMG yet, where can I download it in order to add it to the mirrors?

zlatinb muwire.com/downloads/I2P-1.7.0.dmg

eyedeekay1 Thank you

orignal I'm back anyway

orignal hi

zlatinb zzz: ping, dev beating

zzz 0) Hi

zlatinb sorry, hi :))

zzz hi

zzz lag

zzz what's on the agenda for today?

orignal release

zzz release is 1)

R4SAS hi

zzz how about SSU2 is 2)

zzz anything else for the list?

orignal yes

zzz ok

zzz 1) release

orignal works well so far

R4SAS I'm almost done i2pd release

orignal do you see some improvements?

R4SAS only openwrt left

zlatinb too soon to tell. I'll wait 1 week then try with 1.6.1 to see how it works

R4SAS f-droid pulled release, so tomorrow we will see 2.41.0 on official repo

zzz too early to see any improvement, and I've been running with fixes for weeks, so would be difficult to tell anyway

orignal when do you release?

zzz R4SAS, you have a link to your official fdroid so I can add it to the dashboard?

R4SAS zzz: f-droid.org/en/packages/org.purplei2p.i2pd

zzz we released this morning, but the primary in-net update news site isn't updated yet

zzz thanks R4SAS

zzz PPA and deb repo will be tomorrow

zzz eyedeekay1, ETA for website and android and maven?

eyedeekay1 Website will be ready to flip over within the hour, I'll start Android tonight but all told it will take about a day to get done

zzz super

zzz anything else on 1) ?

R4SAS I fixed my repo build tool

orignal no

R4SAS so I can add impish releases as usually

R4SAS nothing more

zzz I don't have a build tool, I just let launchpad do it :)

R4SAS zzz: I'm about debian repository itself

zzz oh, ok

R4SAS (aka deb.i2p2.de)

orignal people say better tunnel creation rate

orignal and more transit

zzz if you tweet about your release I'll RT

zzz I see zlatinb put something up on reddit

orignal will do tonight

zzz 23.6K members on reddit, pretty impressive, I only have like 4K followers on twitter

zzz eyedeekay1 and zlatinb are doing good work over there

eyedeekay1 Some of them are even natural

zzz heh

zzz ok

zzz 2) SSU2

zzz I guess I'll go first

zzz lots of updates to the proposal

zzz and starting to think about how to adapt my test code into real code

zzz on the proposal, I guessed at a schedule and put it at the top

orignal yes, introducers

zzz and a lot of updates on relay and peer test, as I think I came up with a plan on how to do it

zzz we can talk about it now, or I can just give a high-level explanation, or we can wait a week to give you all more time to look at it

zzz up to you

zzz orignal, what's your status?

orignal nothing

orignal I was busy with release last week

zzz I understand

orignal going to keep working this week

zzz I think I'm ready to do testing with you whenever you're ready

zzz so, does anybody want to hear anything about relay and peer test today, or would you rather wait a week?

eyedeekay1 I'd probably benefit from a high-level overview

zzz one sec while I find something to copypasta

zzz ok here's SSU 1 peer test:

zzz Alice Bob Charlie

zzz 1. PeerTest ------------------->

zzz 2. PeerTest-------------------->

zzz 3. <-------------------PeerTest

zzz 4. <-------------------PeerTest

zzz 5. <------------------------------------------PeerTest

zzz 6. PeerTest------------------------------------------>

zzz 7. <------------------------------------------PeerTest

zzz 1-4 are in-session, 5-7 are out-of-session

orignal yes, I reemeber

zzz Relay is similar, but nothing is in-session

orignal and what will be in SSU2?

zzz there's two main problems in ssu 1

zzz #1, the fact that relay is all out-of-session, so it's vulnerable to spoofed source addresses and stuff

orignal tell me

zzz #2, for both relay and peer test, if Bob is a malicious router, all sorts of bad things can happen

orignal agree

orignal and what's your proposal?

zzz so I have two main ideas

zzz #1 Alice signs the request with the signing key in her RI, and Charlie signs the replay with his signing key

zzz the request has timestamps, nonces, IPs, etc in it

zzz #2 make the relay all be in-session. Even though it's going to mean more round trips, it's worth it

zzz and #3

zzz the requests and responses have router hashes in them, not just IPs and ports

orignal so charlie verifies Alice's signature and Alice Charlie's

zzz so charlie and alice can decide if they want to talk to that router or not

zzz correct orignal

orignal you can't do in-session

orignal becuase 5 is unsolicited

zzz correct, 5-7 of peer test are still out-of-session

zzz I think that's fine, I don't see a security issue

zzz end of overview

zzz ask questions now if you like, or think about it and read the details in the proposal and we can talk more next week

orignal let's do next week

orignal but I like the idea with signatures

orignal to make sure that Bob doesn't spoof peer tests

zzz it also means that in your RI, instead of IP, port, intro key, tag, and expiration, it's just router hash, tag, expiration

zzz but it means alice has to lookup the RI for the introducer if she doesn't have it

zzz but alice can skip introducers that are banned, and just pick a good one, or one she already has the RI for

zzz glad you like it so far

zzz anything else on relay and peer test? or on SSU2?

orignal good idea

orignal btw, I never unserstood

orignal why we have to pass all data

orignal wait

orignal but

orignal what if a Router has multiple addresses

orignal ?

zzz good point, I'm not sure I've thought through all the cases

orignal but

orignal say Alice publishes SSU address with introducers

zzz I put the ip/port and the router hash in the messages

zzz so alice says 'here's the ip/port I want you to test'

orignal that's how we should know

orignal in my oponion RI hash is enough

zzz the details may need some work, but I'm glad you like the high level

orignal yes

orignal let's discuss next week

zzz sure.

R4SAS Blinded message

R4SAS oops

zzz this will be a while, we have a lot of work to do before we get to relay and peer test code

zzz anything else on 2) ?

zzz anything else for the meeting?

orignal no

zzz guess that's it, have a good week

eyedeekay1 zlatinb d681e6a7645ce09d7e3dd511bed829e4cb46bf77ebfdd42116b89a4b8667312b releases/1.7.0/I2P-1.7.0.dmg just want to make sure this is the hash I should be getting, otherwise I've got site changes ready to push

zlatinb ack

eyedeekay1 Awesome they'll be up in a few minutes

eyedeekay1 Oh right, zzz, blog post ready to undraft? Looks ok in my local site

zzz yes

eyedeekay1 OK good

zzz I'm going to DM eche now for a switch flip

eyedeekay1 Sounds good to me

zzz ech says no way today, 24 hour ETA

zlatinb does that mean no bouncing of the website either?

zzz they're independent

zlatinb eyedeekay1: let me know if / when you need to sign the easy install win bundle

eyedeekay1 Will do, probably going to do it tomorrow during the maven/gplay hurry-and-wait period

eyedeekay1 Site updates are pushed, should be visible any second

zlatinb but it can't pick the version number change w/o a bounce, right?

zlatinb or did we fix that?

zzz define "bounce" ?

zlatinb web server restart

zzz I thought that was fixed

zlatinb we'll find out soon :)

zzz but I don't know about 'visible any second', it only yanks from gitlab every hour? half hour?

eyedeekay1 Half hour, seems to be ~:33, :3

eyedeekay1 At least, last time I checked, if you and ech worked on it a few weeks ago then it may be hourly now

eyedeekay1 Nope, there it went

zlatinb nais!

zlatinb btw the systray popup did work on Mac OS

zlatinb zzz: I'm wondering if it isn't better to delay the initial popup until after netdb and exploratory are built

zlatinb or have a second popup

zzz sure, not opposed. let's see how the masses like or hate it