Meeting event link: https://lu.ma/ob80zdv4

Attendees

• @SgtPooki
• @achingbrain
• @2color

Quick FYIs

• redirect config passing is in inbrowser.dev with loading indicator coming from chore(main): release 1.13.4 service-worker-gateway#787. see example in Config flashes before "Loading" screen on subdomains service-worker-gateway#530 (comment)
• Opened up issue tracking removal of react from codebase and different subtasks that can be used to make the final switch easier: Epic: tracking the removal of react service-worker-gateway#786
• Uploaded old helia WG meeting notes archive from Notion to Meeting notes archive #825

Agenda

• Demos?
  • new redirect flow with sw-gateway and discussion about any UX concerns
• IPNS republishing: feat!: add ipns reproviding/republishing #764
  • @helia/http plans
• sw-gateway:
  • do we want to silently fail or block loading flow if url is loaded with invalid config? Do we want to add a query parameter to prevent loading the config? what should we name it?
  • need a solution for invalid paths: UI: better error messaging when invalid protocol is requested? service-worker-gateway#772

Notes

• config injection would allow us to better test direct retrieval and timing.. how do we do so without allowing malicious actors to inject bad dns query servers.
  • we want to test LCP inside service worker gateway when it's retreiving blocks directly from provider, to do so, we need to remove fallback gateways.
  • We also have a threat model where malicious users can override DNS query server, so we want to prevent that.
  • We should prevent overriding: recursive gateways, fallback gateways, dns resolvers, but override the others.
  • we should test removing lz-string and just using encodeURIComponent(json.stringify(config))
  • we should only validate referrer and timestamp if one of "recursive gateways, fallback gateways, dns resolvers" is in the config provided, otherwise use the default.
  • We should fail silently on injecting the config: bug: invalid config results in user stuck on loading screen service-worker-gateway#790

Action items