Closed molnard closed 3 years ago
it's correct, every request requires credentials to be presented as well as requested, and if either is optional than this can leak information to the server about which credentials were or weren't used to make that request, so these zero value credentials are required for the initial requests
At this part https://github.com/zkSNACKs/WabiSabi/blob/master/protocol.md#round-structure
This seems to be wrong or confusing.