From b3ca97dbd0b725b3fd0d5616d0d94984631d33a2 Mon Sep 17 00:00:00 2001 From: Rasmus Dahlberg Date: Thu, 21 Jul 2022 15:05:59 +0200 Subject: add .md suffix --- .../2022-07-replace-domain-hint-with-rate-limit | 33 ---------------------- 1 file changed, 33 deletions(-) delete mode 100644 doc/proposals/2022-07-replace-domain-hint-with-rate-limit (limited to 'doc/proposals/2022-07-replace-domain-hint-with-rate-limit') diff --git a/doc/proposals/2022-07-replace-domain-hint-with-rate-limit b/doc/proposals/2022-07-replace-domain-hint-with-rate-limit deleted file mode 100644 index c1570c9..0000000 --- a/doc/proposals/2022-07-replace-domain-hint-with-rate-limit +++ /dev/null @@ -1,33 +0,0 @@ -# Proposal - -Replace the "domain_hint" key in the input to the add-leaf endpoint with -"rate-limit". The value associated with the "rate-limit" key is on the format: - - method:data - -where the defined methods are: - - - dns: the exact same semantics as today's domain hint - - token: a shared secret that is negotiated between submitter and the log - operator out-of-band - -Example of a rate-limit line using DNS: - - rate_limit=dns:_sigsum_v0.example.org - -Example of a rate-limit line using token: - - rate_limit=token:xxxxxxxxxxxxxxxxxxxxxx - -The "rate_limt" key must not be repeated. - -The "rate_limit" key may be omitted. It is then up to the log server to accept -or reject the user's requests. - -# Motivation - -There are more ways to establish something to rate-limit on than domain hints. -The name "domain_hint" is also not descrptive; it makes understanding harder. - -It is also plausible that a log operator wants to run without a rate limit in -some environments. The above change permits this as well. -- cgit v1.2.3