Validate response from harness node

muse254 / harness

This framework allows for an ICP canister to be piggybacked on IoT devices.

Apache License 2.0

1 stars 0 forks source link

Validate response from harness node #22

Open muse254 opened 2 months ago

muse254 commented 2 months ago

There is no way to know the response from the node is from the loaded program or it has been changed. There's strategies for this particular problem. Should create a detailed proposal for how this issue is addressed @muse254

muse254 commented 2 months ago

Research:

[x] ~Zero-knowledge proof?~ Not feasible, complex&expensive
[ ] Assigning API keys?
[ ] Pub/private key encryption?
[ ] TBA...

Whatever strategy is employed, it should go in the direction of less or no computation when doing verification on the canister.