Query notaries in parallel #1730

New issue

Open

opened 2026-05-03 13:49:51 +00:00 by Crazy_Nicc · 1 comment

Crazy_Nicc commented

2026-05-03 13:49:51 +00:00

I think it would be better to query all configured trusted servers in parallel and use the response the majority responded with, since that is much more likely to be the right key.

I am aware that these Servers are supposed to be trusted, but in reality you often do not really have "trusted servers", and it would still be good to put less trust on them.

Relevant code (I think): https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/src/service/server_keys/acquire.rs#L195-L223

Right now, each Notary Server is queried in sequence, if the one before it did not have the key. This is good for performance, but bad for security, since the first notary Server can serve you arbitrary keys. I think it would be better to query all configured trusted servers in parallel and use the response the majority responded with, since that is much more likely to be the right key. I am aware that these Servers are supposed to be trusted, but in reality you often do not really have "trusted servers", and it would still be good to put less trust on them. Relevant code (I think): https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/src/service/server_keys/acquire.rs#L195-L223