Skip to content
This repository has been archived by the owner on Mar 27, 2024. It is now read-only.

did-exchange: exchange response needs to be signed #24

Closed
llorllale opened this issue Jul 22, 2019 · 0 comments · Fixed by #640
Closed

did-exchange: exchange response needs to be signed #24

llorllale opened this issue Jul 22, 2019 · 0 comments · Fixed by #640
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@llorllale
Copy link
Contributor

We should be signing the connection response. Specifically, the connection object needs to be replaced by connection-sig.

The reason for this is that the keys shared in the initial invitation to exchange will likely NOT be the keys present in the DID shared in the connection response:

  • The keys in the initial invitation to exchange will likely be ephemeral since they are sent in plaintext (by design) and because DIDComm uses keys as identifiers. Identifiers should not be revealed to outside parties.
  • The party has to prove that they own the DID that they are sharing and this is a mechanism to do so in a single message (as opposed to a later challenge-response protocol).
@troyronda troyronda added the enhancement New feature or request label Jul 23, 2019
@llorllale llorllale added this to the 0.1.0 milestone Oct 9, 2019
@fqutishat fqutishat modified the milestones: 0.1.0, 0.1.1 Oct 28, 2019
sandrask added a commit to sandrask/aries-framework-go that referenced this issue Oct 30, 2019
Add signature to outbound exchange response and verify signature in inbound exchange response

Closes hyperledger-archives#24

Signed-off-by: Sandra Vrtikapa <sandra.vrtikapa@securekey.com>
sandrask added a commit to sandrask/aries-framework-go that referenced this issue Oct 30, 2019
Add signature to outbound exchange response and verify signature in inbound exchange response

Closes hyperledger-archives#24

Signed-off-by: Sandra Vrtikapa <sandra.vrtikapa@securekey.com>
sandrask added a commit to sandrask/aries-framework-go that referenced this issue Oct 30, 2019
Add signature to outbound exchange response and verify signature in inbound exchange response

Closes hyperledger-archives#24

Signed-off-by: Sandra Vrtikapa <sandra.vrtikapa@securekey.com>
sandrask added a commit to sandrask/aries-framework-go that referenced this issue Oct 30, 2019
Add signature to outbound exchange response and verify signature in inbound exchange response

Closes hyperledger-archives#24

Signed-off-by: Sandra Vrtikapa <sandra.vrtikapa@securekey.com>
sandrask added a commit to sandrask/aries-framework-go that referenced this issue Oct 30, 2019
Add signature to outbound exchange response and verify signature in inbound exchange response

Closes hyperledger-archives#24

Signed-off-by: Sandra Vrtikapa <sandra.vrtikapa@securekey.com>
sandrask added a commit to sandrask/aries-framework-go that referenced this issue Oct 30, 2019
Add signature to outbound exchange response and verify signature in inbound exchange response

Closes hyperledger-archives#24

Signed-off-by: Sandra Vrtikapa <sandra.vrtikapa@securekey.com>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Development

Successfully merging a pull request may close this issue.

4 participants