Automate root verification #9

Closed
olalonde opened this Issue Mar 2, 2014 · 1 comment

Projects

None yet

1 participant

@olalonde
Owner
olalonde commented Mar 2, 2014

The chrome extension could automate the "root" verification this way:

When the extension discovers a blind liability proof, request http://verificationserver.com/?root=. The verificationserver can then independently fetch the root file and send it back to the extension. The extension can then verify that the retrieved root matches the partial tree's root.

The 3rd party server is necessary to avoid a malicious site from sending a custom root file to different users.

@olalonde olalonde closed this Mar 13, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment