Today if you want to find a persons server on the internet, you find their Internet Protocol Address (IP) and you connect to it.
This is done via the Domain Name System (DNS) which converts all those addresses like funnycan.be to a number (IP) so computers can find each other using a method called routing.
This is invisible most of the time.
For the purposes of this article, let us take it that how Mary finds Sarah in the complex world of IP and routing has been resolved on the distributed social network.
Sending a package would be something like this.
Mary has a group called Lunch Time People.
Mary writes her message to this group, something as simple as: “Lunch today in our favorite place people?”
This message is destined for 10 people.
It has a couple of qualities.
One is timeleness, it needs to be delivered before seats are booked so maybe it has a life span of 2.5 hours.
Another is it has the right to be delivered without anyone in the middle being able to read it, or alter it.
It has a quality that is not spoken about often nonrepudiation, that is the ability the group to not only know it is from Mary but that she can’t deny sending it. Perhaps you may say this is a little extreme for a lunch time invite, but it could be a please take money from my bank account, so there are messages that it would be good to be able to say that about.
So how do you do this.
Simple tools already exist for this, my one of choice is GPG (Gnu Privacy Guard).
It is a non proprietary encryption program, with its source code available for peer review.
If Mary signs the message with her electronic signature using GPG then everyone knows that the message is from her.
If she then encrypts the message to Sarah, and other members of the group it can only be read by them.
http://en.wikipedia.org/wiki/Public-key_cryptography
What this means in practice is that the message is hidden from view of anyone involved in its transit to its destination and thus can’t be altered.
This provides secure computing between the people involved, however when you send data to a person in this way, if their computer has some other compromise (some kind of malware) then the message when it is generated on the compromised computer or opened on the compromised computer is vulnerable to being copied.
We can’t do anything about this much as we can’t do anything about people having badly configured computers, weak passwords, non existant security setups other than advise them as we go.
So that is the message packaging sorted.