search

digitalcredentials / tls-did

2 stars 0 forks source link

[TLSDID] Improve creation. Add addChain to registerContract? Is a contract without chain a security liability? #24

Closed KilianKae closed 3 years ago

KilianKae commented 3 years ago

Yes a contract without a chain is an issue. Since two valid contracts result in none of both resolving, a malicious entity could create a contract with the same domain to take a valid contract offline.

This means contracts without chain have to be regarded as invalid.

KilianKae commented 3 years ago

I decided not to add the addChain contract to the registerContract method to keep the registerContract's complexity low, its story and name clear.