Updated docs for node start-up, tokens, and transactions#120
Updated docs for node start-up, tokens, and transactions#120
Conversation
33ca63d to
32b5652
Compare
| --validator \ | ||
| --rpc-external \ | ||
| --rpc-methods Unsafe \ | ||
| --chain=Testnet1Spec.json |
There was a problem hiding this comment.
I never used the --rpc-external and --rpc-methods Unsafe options so at least for basic usage, these are not necessary. The question is whether users should pass them by default. Ideally, the command to run the node should be as simple as possible.
There was a problem hiding this comment.
If I understand correctly, the rpc-external flag binds to all network interfaces with IP 0.0.0.0, meaning that anyone can connect to the node from outside the network. And rpc-methods Unsafe, basically allows anyone connecting to the RPC to be an owner of the node, and hence, expose keys. Meaning: We're basically exposing everything to everyone and allowing anyone connecting to RPC to do whatever they want... what's the logic behind this?! Did we try not adding them and had problems?
There was a problem hiding this comment.
This is the command to run as I understood it from Amin.
@zorvan What do you think of Lukas's and Sam's comments?
There was a problem hiding this comment.
They are right. Latest version of cli switches for user and production id reaped off from those.
There was a problem hiding this comment.
@zorvan so what is the correct command? Should I simply remove --rpc-external and --rpc-methods Unsafe?
There was a problem hiding this comment.
As in every issue in programming, that depends on what you want to do. The right solution, in my opinion, is to remove these and tell the user that they will be binding to localhost, hence, no connections from the outside will be possible and explain that this is a safety procedure and using tunnels is usually better than opening to the outside, and then explain that unsafe methods will not work unless the user enables them.
There was a problem hiding this comment.
And let me explain that hacks with externally accessible RPC happened before:
docs/tokens.md
Outdated
|
|
||
| A transaction involving transaction output carries a (possibly empty) `data` field specifying the purpose of the transaction. | ||
|
|
||
| **TOOD when is there no data field?** |
There was a problem hiding this comment.
Should be here TODO instead of TOOD?
docs/tokens.md
Outdated
|
|
||
| **TOOD when is there no data field?** | ||
|
|
||
| The data field can be any of the fol |
docs/tokens.md
Outdated
|
|
||
| **TODO is the sentence below true? In the example, I don't see any data relating to the token in the input.** | ||
|
|
||
| When issuing a new token, we specify the data for creating a new token in the transaction input, where the `token_id` is a hash of the inputs. |
There was a problem hiding this comment.
When issuing a new token, we specify the data for creating a new token in the transaction output. After that, a wallet should calculate the token_id that is a hash of the first input of the issuance transaction. And use this token_id is able to send tokens to anyone.
There was a problem hiding this comment.
Thanks, that clarifies things! I will modify the explanation.
docs/tokens.md
Outdated
|
|
||
| When issuing a new token, we specify the data for creating a new token in the transaction input, where the `token_id` is a hash of the inputs. | ||
|
|
||
| **TODO explain the remaining fields (token_ticker, metadata_URI)** |
There was a problem hiding this comment.
token_ticker is a short name of the token. No longer than 5 symbols.
metadata_URI is a web link to a JSON file where we can store additional information for the token: #67 Over here you can find the paragraph: Format of data located by reference metadata_URI
There was a problem hiding this comment.
@sinitcin Which characters can be used in the token ticker? Are numbers, special characters allowed?
docs/tokens.md
Outdated
|
|
||
| **TODO explain the remaining fields (token_ticker, metadata_URI)** | ||
|
|
||
| **TODO the token issuance struct shown here has a token_id which does not appear in the example. In staging, this is commented out. Why?** |
There was a problem hiding this comment.
During the review process, Sam tell me that I have to remove token_id in TokenIssuanceV1 because it's a calculatable field from an of the first input. I will clear comments.
b8767ec to
838dc5d
Compare
838dc5d to
5cc65bb
Compare
No description provided.