Suggestion 1: Introduce Protocol-Specific Message Verification

[mpguerra]

Location

src/comms/http.rs#L308

Synopsis

In Round 2, the coordinator sends the message to the participant, but the participant does not verify its protocol-specific structure. This deviates from the recommendations documented in RFC 9591 (Section 7.7) and the frost-crate (here).

Mitigation

We recommend defining message verification as a trait requiring users to implement protocol-specific message verification. We also suggest message hashing, as recommended in RFC 9591 (Section 7.6).