All servers that expose public services are vulnerable to DoS. Standard mitigations include IP banning and rate limiting. For maintainer pushes and repository creation, GRASP servers can temporarily (or permanently, if they wish) use features such as npub whitelists and Web of Trust (WoT). For PR submissions (pushing to ref/nostr/), GRASP servers can suspend acceptance of pushes when there isn't an existing event (where WoT can be applied) during an attack. Other GRASP servers not under attack can accept this data and ours can pick up this data later.
Login to reply