-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: custom pubkeys inmemory service #194
Conversation
5733f31
to
087ed26
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would appreciate some context on why this feature is necessary. The branch name suggests it has something to do with DoS but it's not clear from the code
Jumping in the conversation - still need to review it though, most likely not going to be able to do it today. The thing here is currently the aggregator makes a bunch of RPC calls to initialize a message even though the signature present is not from a registered operator, which opens a quite big DOS window. So, the idea is one of the most basic mitigations is we validate the signature before anything else - and the OperatorPubkeys service from |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Overall LGTM, just still one or two changes I think are considerable enough to require a quick look again.
a22bf14
to
33019e9
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'll still ask you to check and self-resolve my comments, but not blocking anymore.
Can we merge this soon? @emlautarom1 @taco-paco |
LGTM. Just need to solve the merge conflicts + resolve discussions. |
No description provided.