You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently during the Verify method on the RingSig type we ensure the ring signature is valid. However, as long as the ring was valid on creation any signatures made with it indefinitely will be valid. I propose the following method to be added to ensure the RingSig has an up to date version of the ring. This is vital for our usecase where the ring is created via known data (available to all) and thus when verifying it we want to ensure the signer is using the latest copy of the ring (and they still have permission to be signing things)
Overview
Currently during the
Verify
method on theRingSig
type we ensure the ring signature is valid. However, as long as the ring was valid on creation any signatures made with it indefinitely will be valid. I propose the following method to be added to ensure theRingSig
has an up to date version of the ring. This is vital for our usecase where the ring is created via known data (available to all) and thus when verifying it we want to ensure the signer is using the latest copy of the ring (and they still have permission to be signing things)The text was updated successfully, but these errors were encountered: