continuwuation/continuwuity
continuwuation/continuwuity
Watch
18
115
Fork
You've already forked continuwuity
 132
Code Issues 137 Pull requests 44 Releases 42 Packages 3 Activity Actions

feat: Support acting as a notary server #2314

Open
nex wants to merge 25 commits from nex/feat/notary-server into main
pull from: nex/feat/notary-server
merge into: continuwuation:main
Conversation 7 Commits 25 Files changed 11 +578 -108

2026-10-14

timedout
feat: Update MSC4456 implementation, new route
Some checks failed
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 6s
Details
Checks / Prek / Check changed files (pull_request) Successful in 7s
Details
Documentation / Build and Deploy Documentation (pull_request) Successful in 1m8s
Details
Update flake hashes / update-flake-hashes (pull_request) Successful in 1m20s
Details
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 20m55s
Details
Checks / Prek / Clippy and Cargo Tests (pull_request) Failing after 40m59s
Details
298113c0a6
2026-10-14 10:34:52 +01:00
timedout
fix: Address review comments
62de19970e
2026-10-14 10:34:51 +01:00
timedout
perf: Yield ssk instead of doing a serialization roundtrip
6b532eb7d0
2026-10-14 10:34:51 +01:00
timedout
feat: Don't double-sign our own keys
b541aadc2b
2026-10-14 10:34:51 +01:00
timedout
fix: Don't do weird wire signing for server keys route
c1f6a7c082
2026-10-14 10:34:51 +01:00
timedout
fix: Don't make origin key requests to ourself 
Intercepting the request and serving it locally seems like a pretty good blanket solution
3508b1a5e3
2026-10-14 10:34:51 +01:00
timedout
fix: Typo (MSC4456 -> MSC4556)
9867e99bb2
2026-10-14 10:34:50 +01:00
timedout
style: Reformat
7b180667e8
2026-10-14 10:34:50 +01:00
timedout
fix: Pass correct object for signing
e001e4a68a
2026-10-14 10:34:50 +01:00
timedout
chore: Update trusted_servers docs
75383af35c
2026-10-14 10:34:50 +01:00
timedout
fix: Don't serve expired responses in the criterialess path
c486eeac06
2026-10-14 10:34:49 +01:00
timedout
fix: Enforce specific notary limits per MSC4556
1ded0b4e97
2026-10-14 10:34:49 +01:00
timedout
fix: Refuse to process >4096 servers and/or >8192 keys 
pending msc
cd94a0d3ab
2026-10-14 10:34:49 +01:00
timedout
fix: Deduplicate signing key responses if we already satisfied them
08307970a1
2026-10-14 10:34:49 +01:00
timedout
fix: Don't short circuit if all requested servers have no query criteria 
Also adds some traces
ebf7c9920a
2026-10-14 10:34:48 +01:00
timedout
chore: Rebuild example config
a15905e8c9
2026-10-14 10:34:47 +01:00
timedout
feat: Correctly ask origin for keys before seeding from local cache
19bc5d2016
2026-10-14 10:32:36 +01:00
timedout
chore: Add newsfrag
6bbebd8b54
2026-10-14 10:32:36 +01:00
timedout
fix: Maybe query origin when fetching latest keys
4e1fb09bfb
2026-10-14 10:32:36 +01:00
timedout
fix: Don't attempt to contact origins as a notary more than once a minute
39cd151ca3
2026-10-14 10:32:36 +01:00
timedout
fix: Actually contact origins in notary key fetching
a5a7905494
2026-10-14 10:32:35 +01:00
timedout
style: Condense repeated code into a reusable function
a05d7a8cf3
2026-10-14 10:32:35 +01:00
timedout
fix: Correctly sum total_queried_keys
af8ca8580e
2026-10-14 10:32:35 +01:00
timedout
feat: Strip extraneous signatures to avoid leaking our own notaries
7050ea84e3
2026-10-14 10:32:35 +01:00
timedout
feat: Notary server
441ab78c4e
2026-10-14 10:32:34 +01:00