Skip to content

0.8.5

Pre-release
Pre-release
Compare
Choose a tag to compare
@aep aep released this 11 Feb 20:33
· 182 commits to master since this release

carrier now supports "principal" identities.

these are a light version of delegated identities with the same use case
but backwards compatible with pre 0.8 clients.

you can now specify two different secrets in carrier.toml like so:

secret     = "oX...."
principal =  "oX...."

the secret is still bound to one computer and will be used to synchronize with the network, but the principal can be shared among many peers and is used to establish a peer to peer session with for example conduit or shell.

users with cloud environments can now use the same secret as principal, while using different peer identities in each container.

Due to the security implications of sharing a principal key, we recommend users restrict their principal key access to the absolute minimum and never store it in on disk. Preferably use something like hashicorp vault.