Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

verify nonce for TrustedCall in stf #89

Closed
brenzi opened this issue Feb 10, 2020 · 1 comment
Closed

verify nonce for TrustedCall in stf #89

brenzi opened this issue Feb 10, 2020 · 1 comment
Labels
F1-security possible vulnerability F8-enhancement New feature or request
Milestone
FUTURE

Comments

@brenzi
Copy link
Collaborator

brenzi commented Feb 10, 2020 •
edited
Loading

Like for any blockchain we need a way to protect against replay attacks (someone dispatches a request more than one time, which i.e. in the case of transfers can be undesired). The request format already includes a nonce since
defcd21

this also implies that we need a ws call to the worker to get the latest nonce. the client needs that nonce to compose his call
@brenzi brenzi added F8-enhancement New feature or request F1-security possible vulnerability labels Feb 10, 2020
@brenzi brenzi added this to the M7 milestone Feb 10, 2020
@brenzi brenzi mentioned this issue Feb 11, 2020
Closed
@brenzi brenzi modified the milestones: M7, FUTURE May 25, 2020
@brenzi brenzi mentioned this issue May 27, 2020
Closed
@brenzi brenzi mentioned this issue Sep 1, 2020
Open
@brenzi
Copy link
Collaborator Author

brenzi commented Nov 8, 2020

this may be solved by #186

@brenzi brenzi mentioned this issue Feb 8, 2021
Closed
@brenzi brenzi mentioned this issue Apr 6, 2021
Merged
brenzi pushed a commit that referenced this issue Apr 6, 2021
@haerdib
Add nonce validation to trusted calls (#225)
1b18c35 
* closes #89 
* Trusted getter for nonce (#232)
haerdib added a commit that referenced this issue Apr 6, 2021
@haerdib
Add nonce validation to trusted calls (#225)
9d280d3 
* closes #89 
* Trusted getter for nonce (#232)
brenzi pushed a commit that referenced this issue Apr 8, 2021
@haerdib
Add nonce validation to trusted calls (#225)
000d563 
* closes #89 
* Trusted getter for nonce (#232)
@brenzi brenzi closed this as completed in 6e76d45 Apr 8, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
F1-security possible vulnerability F8-enhancement New feature or request
Projects
None yet
Milestone
FUTURE
Development

No branches or pull requests
1 participant
@brenzi