This is the "Caps" key for accessing the SSB protocol. It will be updated whenever breaking changes are made. See the secret-handshake paper for a full explanation:
http://dominictarr.github.io/secret-handshake-paper/shs.pdf
npm install --save ssb-caps
From JavaScript:
var caps = require('ssb-caps')
console.log(caps) // JSON object: {shs, sign}
console.log(caps.shs) // this is a string to be interpreted as base64
console.log(caps.sign) // this is so far null
var buf = Buffer.from(caps.shs, 'base64')
From other languages: download the caps.json file from this package and
parse it using some JSON parser in your language.
There is nothing special about the Caps SHS value, it was randomly generated in the Node.js REPL with:
crypto.randomBytes(32).toString('base64')
This value is presented as a string to be interpreted in base64. To convert from this string to binary (in Node.js):
Buffer.from(require('ssb-caps').shs, 'base64')
If this library updates the Caps, we MUST issue a new major version.
To the extent possible under law, the author(s) have dedicated all copyright and related and neighboring rights to this software to the public domain worldwide. This software is distributed without any warranty.
You should have received a copy of the CC0 Public Domain Dedication along with this software. If not, see http://creativecommons.org/publicdomain/zero/1.0/.
FAQs
The Caps string for accessing the SSB protocol using secret handshake
We found that ssb-caps demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 18 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket is tracking a new trend where malicious actors are now exploiting the popularity of LLM research to spread malware through seemingly useful open source packages.
Security News
Research
Noxia, a new dark web bulletproof host, offers dirt cheap servers for Python, Node.js, Go, and Rust, enabling cybercriminals to distribute malware and execute supply chain attacks.
Company News
Socket safeguards companies from software supply chain attacks by detecting and preventing threats in open source code and empowering developers to secure their applications and critical services against malware and other security risks.