Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

avoid leakage through reputation lookup #11

Open
brenzi opened this issue May 27, 2023 · 0 comments
Open

avoid leakage through reputation lookup #11

brenzi opened this issue May 27, 2023 · 0 comments

Comments

@brenzi
Copy link
Member

brenzi commented May 27, 2023

Our first naive design verifies reputation on Encointer's parachain using a (local) rpc node and storage proofs. The operator of the personhood oracle could sniff these lookups and learn the link between badges issued by the oracle and encointer accounts

This linkability can be avoided by replicating the entire reputation registry inside the enclave and performing lookups there. An intermediate option would be to mask the lookup with a ton of fake requests. This only protects privacy if fakes are accounts with the same reputation as the badge issued, so this option may be tricky to do

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant