Open kern opened 6 years ago
concern: everyone can read everyone else's key pair information, which is obviously not ideal. perhaps there's an access token system that uses the key pair challenge, which can be used to detect if a key pair should be accessible or not? or perhaps if the key pair's metadata is accessible?
possible solution: whenever registering a keypair, associate it with an identity contract as well. that way, each keypair is only associated with the intended identity, as opposed to any identity (which could lead to information leakage).
putting this on the backlog until we have better support for multi-device identities