search

ietf-wg-privacypass / draft-ietf-privacypass-consistency-mirror

K-Check protocol specification
Other
0 stars 5 forks source link

Mirrors cannot be used to establish the authenticity of content #27

Open martinthomson opened 11 months ago

martinthomson commented 11 months ago

This really needs to be said a few times: mirrors cannot be used to establish the authenticity of content, only its consistency.

Please consider adding that to the security considerations.