Skip to content

security: verify WorkerAnnouncement.peer_id against Ed25519 signer #144

@intendednull

Description

@intendednull

WorkerAnnouncement.peer_id is not verified against the Ed25519 signer. Currently no-op (Worker arm drops), but should be validated before WorkerCache integration. Found by security audit of fix/issue-108-final.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions