Publisher Certificates - Githubissues

icdevs / ICEventsWG

WG for developing an Event System(pub/sub) on the Internet Computer

3 stars 3 forks source link

Publisher Certificates #42

Open skilesare opened 5 months ago

skilesare commented 5 months ago

Should we be signing these items before they go out?

skilesare commented 5 months ago

icrc72_get_certificate(nat) query => Return the certificate and tree to prove the body hasn't been manipulated.

lachlanw commented 5 months ago

This seems like an essential feature to all any receiver in the event message relay chain to confirm the integrity of the message data. Should the draft provide example code showing how to use this function to perform a signature verification?

skilesare commented 5 months ago

Who can sign

Subnet - sign state
Canister - sign tecdsa

Not required but we can provide the mechanism

Lachlan: External systems out side of the IC will need it.

skilesare commented 5 months ago

Add a header to indicate that a certificate exists.

skilesare commented 4 months ago

Austin: Summarize and Vote.

skilesare commented 2 months ago

Move this to its own ICRC

icrcXX_get_certificate(nat) query => Return the certificate and tree to prove the body hasn't been manipulated.

icrcXX:eventData:certificateFlag - a #Text true if the source provides an endpoint for retrieving a certificate.