Skip to content

Commit

Permalink
fix link, small formatting changes, remove todo
Browse files Browse the repository at this point in the history
  • Loading branch information
bitfl0wer committed Dec 30, 2024
1 parent 64a8fdb commit 2c445d4
Showing 1 changed file with 4 additions and 9 deletions.
13 changes: 4 additions & 9 deletions docs/Protocol Specifications/core.md
Original file line number Diff line number Diff line change
Expand Up @@ -608,9 +608,7 @@ require a second factor of authentication.

!!! info "Revocation detection"

For information on how revocation detection is supposed to be handled, concern the excerpt
<a href="#idcert-cache-ttls">"Caching ID-Certs and cache TTLs"</a>
TODO fix link
For information on how revocation detection is supposed to be handled, concern [section 6.4](#64-caching-of-id-certs)

TODO: Write about identifier changing and how to handle that across servers
TODO: Perhaps recommend never using more than a specified number of certificates at once to make
Expand Down Expand Up @@ -654,8 +652,9 @@ ID-Cert attached to the message and ensuring its public key matches the sender's
???+ example

Say we have two actors. Alice, who is registered on Server A, and Bob, who is registered
on Server B. Alice and Bob **are having a conversation on Server B**. Given a signed message from Alice,
such as Bob would receive from Server B, the process of verifying the signature would look like this:
on Server B. Alice and Bob **are having a conversation on Server B**. Given a signed message from
Alice, such as Bob would receive from Server B, the process of verifying the signature would look
like this:

```mermaid
sequenceDiagram
Expand Down Expand Up @@ -691,10 +690,6 @@ ID-Cert attached to the message and ensuring its public key matches the sender's
Understanding both sections is crucial for building secure, scalable and compliant
implementations of polyproto.

TODO: IDEA: To keep other servers from not re-requesting the idcert after the ttls has passed, the
idcert should have some sort of timestamp that is signed by the original server, so that clients can
verify that a server has the most up-to-date idcert cached for a user -flori

!!! info

A failed signature verification does not always mean that the message is invalid. It may be that
Expand Down

0 comments on commit 2c445d4

Please sign in to comment.