@@ -55,7 +55,12 @@ Regardless of who deploys it and where, any IPFS gateway resolves access to any
55
55
56
56
## 3. What types of IPFS gateways exist?
57
57
58
- The discussion above illustrated the use of read-only HTTP(S) gateways to fetch content. Other types of gateways exist as well:
58
+ ### 3.1 Read-only and writeable gateways
59
+ The discussion above illustrated the use of read-only HTTP(S) gateways to fetch content; i.e., supports HTTP(S) GET.
60
+
61
+ _ Writeable_ HTTP(S) gateways also support POST, PUT and DELETE methods to manage content in IPFS.
62
+
63
+ ### 3.2 Gateway types
59
64
60
65
| gateway type | sub-type | functional description |
61
66
| -----------: | :------- | :-- |
@@ -79,7 +84,7 @@ Any gateway introduces delay in completing desired actions.
79
84
Faster execution occurs when using methods close to the top of the following list instead of those toward the bottom:
80
85
* native IPFS node embedded within the app.
81
86
* IPFS extension to app.
82
- * gateway installed as a local server on the app's machine , with redirection of requests
87
+ * gateway installed as a local daemon , with redirection of requests
83
88
from app to the local service.
84
89
* public/private gateways.
85
90
@@ -89,7 +94,10 @@ If the app must employ an extenal gateway, such apps should use ipfs.io or a tru
89
94
90
95
## 6. Limitations
91
96
92
- ### 6.1 Gateway man-in-the-middle (MIM) vulnerability
97
+ ### 6.1 Centralization
98
+
99
+
100
+ ### 6.2 Gateway man-in-the-middle (MIM) vulnerability
93
101
Employing a public or private HTTP(S) gateway sacrifices end-to-end cryptographic validation of delivery of the correct content.
94
102
Consider the case of a browser fetching content with the URL ` https://anipfsgateway.org/ipfs/{cid} ` .
95
103
A compromised ` anipfsgateway.org ` provides man-in-the-middle vulnerabilities, including:
0 commit comments