Closed retoheusser closed 7 months ago
The latest updates on your projects. Learn more about Vercel for Git ↗︎
Name | Status | Preview | Comments | Updated (UTC) |
---|---|---|---|---|
toofake | ✅ Ready (Inspect) | Visit Preview | 💬 Add feedback | Apr 2, 2024 10:11pm |
Will merge soon - smart to generate a bunch of sigs using the secret key and upload them to a list, thanks! -- this may stop working if bereal also starts checking device id
this may stop working if bereal also starts checking device id
Don't think so. They can only verify the signature because it's dependent on the key, the current time, the timezone and the device id. But the device id can be arbitrary as long as the signature matches the device id. They could start blocking a certain device id because they think it's overused but I regard that as quite unlikely.
This fixes the issue of the expiring signature each week. It uses pre-computed signatures for the next two years.