orbitdb-archive / ipfs-log

Append-only log CRDT on IPFS
https://orbitdb.github.io/ipfs-log/
MIT License
398 stars 55 forks source link

Signature verification failure #242

Closed johansten closed 5 years ago

johansten commented 5 years ago

As part of using a feedstore that anyone can write to, I'm getting into the situation where writes fail in log.js#370. I'm guessing that it's due to the identity store of a peer only having its own key, and thus being unable to verify anyone else signatures (even though all the needed information seems be a part of the message).

johansten commented 5 years ago

After some hours of debugging, it turned out that the payload was to blame. Don't use objects, because properties might get reordered, and that will make your signatures be invalid.