New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Be more specific about Credential verification #678

Closed

raphaelrobert opened this issue May 17, 2022 · 0 comments · Fixed by #703

Member

raphaelrobert commented May 17, 2022

While this is spread out throughout the document, it would be beneficial to spell out in which scenarios a Credential MUST be verified (with the AS):

When fetching a KeyPackage to add a new member
When discovering a KeyPackage in an AddProposal from another member
When joining a new group (verify all other members' Credentials), both when receiving a Welcome message and when joining through an External Commit
When a member updates its leaf
... anywhere else?

raphaelrobert mentioned this issue

Remove clause about verifying identity changes. #660

Closed

bifurcation mentioned this issue

Be more precise about credential validation #703

Merged

bifurcation closed this as completed in #703

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment