Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve terminology #121

Closed
chris-wood opened this issue Jun 16, 2022 · 4 comments · Fixed by #127
Closed

Improve terminology #121

chris-wood opened this issue Jun 16, 2022 · 4 comments · Fixed by #127

Comments

@chris-wood
Copy link
Collaborator

We need to improve the terminology in this draft. In particular, we need a distinguished term for the request to the proxy, which includes the encapsulated request, as well as a distinguished term for the inner request from client to target.

@LPardue
Copy link
Contributor

LPardue commented Jun 16, 2022

This would IMO help. There seems to be important security properties related to demarcation between the requests and having terms that could lead to ambiguity doesn't seem good.

@tfpauly
Copy link
Collaborator

tfpauly commented Jun 16, 2022

I personally used the following terms when I implemented the client-side:

  • "Oblivious Request" is the encrypted message that goes from the client to the proxy
  • "Oblivious Response" is the encrypted message that goes from the proxy to the client

I didn't have terms for the inner requests and responses — the response was just a "decrypted response". But using "inner" might make sense, or "plaintext"?

@martinthomson
Copy link
Collaborator

inner = encapsulated
outer = oblivious

These all work for me.

@chris-wood
Copy link
Collaborator Author

chris-wood commented Jun 27, 2022

Hrm, on reflection, I don't think "oblivious request" and "oblivious response" will work for the client<>proxy messages, since oblivious request means something else in this document (the resource that decrypts the encapsulated request for the target). I have an alternative proposal in #121 that I think better describes the different requests and resources based on what they're doing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants