iskendria-pub / iskendria

Blockchain-based system for scientific publishing
BSD 3-Clause "New" or "Revised" License
0 stars 0 forks source link

Make security production-proof #2

Open mhdirkse opened 5 years ago

mhdirkse commented 5 years ago

[AX-2] created by mdi

mhdirkse commented 5 years ago

It is acceptable if the prototype of Alexandria has imperfect security. This issue is about improving the security to production quality.

One of the issues is the network keypair embedded in /etc/sawtooth/validator.toml. This is a standard key now that was generated by the Sawtooth team. For Alexandria we should generate our own keypairs and keep the network private keys secret.