Skip to content

Commit e660f9f

Browse files
committed
Clarify writeable HTTP gateways vs other types
Ref #93
1 parent 7ffb477 commit e660f9f

File tree

1 file changed

+11
-3
lines changed

1 file changed

+11
-3
lines changed

content/guides/concepts/ipfs-gateway.md

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,12 @@ Regardless of who deploys it and where, any IPFS gateway resolves access to any
5555

5656
## 3. What types of IPFS gateways exist?
5757

58-
The discussion above illustrated the use of read-only HTTP(S) gateways to fetch content. Other types of gateways exist as well:
58+
### 3.1 Read-only and writeable gateways
59+
The discussion above illustrated the use of read-only HTTP(S) gateways to fetch content; i.e., supports HTTP(S) GET.
60+
61+
_Writeable_ HTTP(S) gateways also support POST, PUT and DELETE methods to manage content in IPFS.
62+
63+
### 3.2 Gateway types
5964

6065
| gateway type | sub-type | functional description |
6166
| -----------: | :------- | :-- |
@@ -79,7 +84,7 @@ Any gateway introduces delay in completing desired actions.
7984
Faster execution occurs when using methods close to the top of the following list instead of those toward the bottom:
8085
* native IPFS node embedded within the app.
8186
* IPFS extension to app.
82-
* gateway installed as a local server on the app's machine, with redirection of requests
87+
* gateway installed as a local daemon, with redirection of requests
8388
from app to the local service.
8489
* public/private gateways.
8590

@@ -89,7 +94,10 @@ If the app must employ an extenal gateway, such apps should use ipfs.io or a tru
8994

9095
## 6. Limitations
9196

92-
### 6.1 Gateway man-in-the-middle (MIM) vulnerability
97+
### 6.1 Centralization
98+
99+
100+
### 6.2 Gateway man-in-the-middle (MIM) vulnerability
93101
Employing a public or private HTTP(S) gateway sacrifices end-to-end cryptographic validation of delivery of the correct content.
94102
Consider the case of a browser fetching content with the URL `https://anipfsgateway.org/ipfs/{cid}`.
95103
A compromised `anipfsgateway.org` provides man-in-the-middle vulnerabilities, including:

0 commit comments

Comments
 (0)