
9/17/2018 · Brendan McMillion
What this post added
This post details the implementation of end-to-end integrity for websites served via Cloudflare's IPFS gateway. It introduces the use of 'ipfs-sec' subdomains, requiring DNSSEC setup, and describes a modified go-ipfs gateway capable of providing cryptographic proofs of content honesty. The post explains how these proofs are generated for single files, directories (using Hash Array Mapped Tries - HAMT), and domain names via DNSSEC validation. A browser extension is also introduced to request and verify these proofs, providing a graceful upgrade path for users.