security: validator needed
Closed this issue · 1 comments
tianyuan129 commented
Current design requires knowing data producers' public keys in advance. A validator is needed to automatically fetch producers' certificates and validates them in the certificate chain. However, considering the memory limit, we don't cache them, but trace them in the certificate chain (maybe until reach the trust anchor).
Zhiyi-Zhang commented
Addressed by Sig Verifier in app-support.