holochain / holochain-rust

DEPRECATED. The Holochain framework implemented in rust with a redux style internal state-model.
GNU General Public License v3.0
1.12k stars 267 forks source link

Fix sim2h dependence on agent signing for hosted hApps use-case #2203

Closed zippy closed 4 years ago

zippy commented 4 years ago

PR summary

In the use-case of a remote signing service that is not always guaranteed to be available (as in the hosted happs usecase of holo), assumptions in sim2h for message integrity that rely on agents signing all messages, breaks down.

This PR fixes this issue by only requiring that the Join message be signed by the agent. This works along with wss because the connection (which is long lasting) is then secured by the tls layer.

testing/benchmarking notes

( if any manual testing or benchmarking was/should be done, add notes and/or screenshots here )

followups

( any new tickets/concerns that were discovered or created during this work but aren't in scope for review here )

changelog

- summary of change [PR#1234](https://github.com/holochain/holochain-rust/pull/1234)

documentation