Skip to content

Add a section on Phone Home mitigations #19

@dmitrizagidulin

Description

@dmitrizagidulin

For a given renderMethod template, a publisher has to make the usual engineering trade-off: link to it, or embed it?

Linking to a template -- space efficient, BUT phone-home possibility.

Embedding a template -- secure, but dramatically increased VC size (depending on size, may have parsing issues on mobile platforms).

Discuss possible mitigation methods:

  • Does compression (gzip + text-encode) help any?
  • Common template URLs (especially with digest hashes) can be cached by wallets
  • Trusted cached directories of templates
  • etc

Metadata

Metadata

Assignees

No one assigned

    Labels

    ready for prThe issue is ready to be addressed by a Pull Request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions