aboutsummaryrefslogtreecommitdiff
path: root/doc/proposals/2022-01-no-quick-tree-head-endpoint
diff options
context:
space:
mode:
authorRasmus Dahlberg <rasmus@mullvad.net>2022-01-25 16:41:32 +0100
committerRasmus Dahlberg <rasmus@mullvad.net>2022-01-25 16:44:42 +0100
commitf465bc8c661856cd9dc768de3278befbae554490 (patch)
treec14ec162f33549218607647cfc8faa2eec50f1f2 /doc/proposals/2022-01-no-quick-tree-head-endpoint
parentb6c77105558f0547d18fb9f141add015a249a8bb (diff)
persisted pads from meeting minutes
Diffstat (limited to 'doc/proposals/2022-01-no-quick-tree-head-endpoint')
-rw-r--r--doc/proposals/2022-01-no-quick-tree-head-endpoint32
1 files changed, 32 insertions, 0 deletions
diff --git a/doc/proposals/2022-01-no-quick-tree-head-endpoint b/doc/proposals/2022-01-no-quick-tree-head-endpoint
new file mode 100644
index 0000000..3a31a04
--- /dev/null
+++ b/doc/proposals/2022-01-no-quick-tree-head-endpoint
@@ -0,0 +1,32 @@
+Proposal: no quick tree-head endpoint
+
+Refer to
+
+ https://git.sigsum.org/sigsum/tree/archive/2022-01-18-tree-head-endpoint-observations
+
+for background.
+
+This proposal suggests that we only have two tree head endpoints.
+ 1. get-tree-head-to-cosign -> signed tree head. This is the tree head that
+ witnesses are currently cosigning. This endpoint is only meant to be used
+ by witnesses.
+ 2. get-tree-head-cosigned -> cosigned tree head. This is the finalized tree
+ head that witnesses have finished cosigning. The list of cosignatures is
+ thus fixed.
+
+The to-cosign and cosigned tree heads are rotated every $n minutes. A typical
+value of $n is likely going to be five (5). It might be lower if witnesses
+accept to work more.
+
+Pros:
+ * Less complex API. It has fewer endpoints and no choice between a "quick"
+ or "slow" get-tree-head-cosigned endpoint. No choices means easier tooling,
+ fewer mistakes.
+ * It might be reasonable to speed up the "slow" endpoint by other means, see
+ above.
+
+It is also worth pointing out another pro that we already got from removing the
+get-tree-head-latest endpoint. A submitter is forced to wait a bit, even for a
+signed tree head. This makes it less appealing to "go with a signed tree head
+because its fast". The name of the only signed tree head endpoint also
+discourages usage by submitters.