holochain / holochain-proto

Holographic storage for distributed applications -- a validating monotonic DHT "backed" by authoritative hashchains for data provenance (a Ceptr sub-project)
http://holochain.org
GNU General Public License v3.0
876 stars 143 forks source link

examine security of Message.From #406

Open zippy opened 7 years ago

zippy commented 7 years ago

Currently the message object has a From that it's set by the sender. This introduces the envelope/ vs header/body distinction that allows the possibility of false provenance. Probably we should remove this, and instead pass the from as a parameter to all Receiver functions rather than have them extract this value from the Message

lucksus commented 7 years ago

We want to talk about this make a decision how to deal with this..