1 Feb 06:18
Re: Game record verification
Andrew Plotkin <erkyrath <at> eblong.com>
2006-02-01 05:18:13 GMT
2006-02-01 05:18:13 GMT
On Fri, 27 Jan 2006, Andrew Plotkin wrote: > Possible variant: Maybe we don't want to keep these interim records in the > bookkeeper. (There could be a lot of them, since a game could be in progress > for a long time... maybe indefinitely.) It's perfectly feasible for the > *referee* to hold onto them, as long as the bookkeeper digitally signs them > first. That is, the bookkeeper is still doing all the dialbacks at game-start > time, but it immediately sends the (signed) results back to the referee. I now think this variant is broken. If the bookkeeper isn't keeping track, an evil referee could ping out a dozen players sets to the bookkeeper. The client would acknowledge all of them. The ref uses one for the actual game record, and keeps the other eleven (properly signed) for fraudulent use later. So I think if we do this at all, the bookkeeper is going to have to hold a record for the duration of the game. This isn't a significant load for normal use (every game *ends* with a permanent record anyhow). But the bookkeeper would have to do occasional polling of referees to see if old interim records can be dropped. There are still holes in the scheme. (Say, a referee submits a game record very late -- like, a week late -- and with bad winner info, in hopes that all the players will have gone on vacation and not be checking their game histories. Okay, that's not a very interesting hole...) --Z -- -- "And Aholibamah bare Jeush, and Jaalam, and Korah: these were the borogoves..."(Continue reading)

RSS Feed