Skip to content

[VIndex] Consider changing keys in index from fixed-size hashes to a prefix trie #33

@mhutchinson

Description

@mhutchinson

The main README for the VIndex has the following:

Important

This describes the MapFn as returning key hashes.
We may want to have the map return the raw key (e.g. maps.google.com) so that a prefix trie can be constructed.

Raising this issue as a place for discussion on this.

The current implementation explicitly slots each entry into discrete buckets, in the form of a hash. For example, in CT a cert for maps.google.com will be indexed at:

  • H("maps.google.com")
  • H("google.com")

Early feedback on the map has suggested that it would be more natural to have this simply return a string, e.g. ".com.google.maps". This would then allow the domain operator to look up all domains and subdomains by searching the prefix trie index for ".com.google".

There are arguments both ways, so raising this issue as a lightning rod for transparent discussion on which direction is most useful. Note that this must consider ecosystems other than only CT.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions