-
Notifications
You must be signed in to change notification settings - Fork 4
Description
The main README for the VIndex has the following:
Important
This describes the MapFn as returning key hashes.
We may want to have the map return the raw key (e.g. maps.google.com) so that a prefix trie can be constructed.
Raising this issue as a place for discussion on this.
The current implementation explicitly slots each entry into discrete buckets, in the form of a hash. For example, in CT a cert for maps.google.com will be indexed at:
H("maps.google.com")H("google.com")
Early feedback on the map has suggested that it would be more natural to have this simply return a string, e.g. ".com.google.maps". This would then allow the domain operator to look up all domains and subdomains by searching the prefix trie index for ".com.google".
There are arguments both ways, so raising this issue as a lightning rod for transparent discussion on which direction is most useful. Note that this must consider ecosystems other than only CT.