orbitdb-archive/ipfs-log

Signature verification failure

johansten opened this issue · 1 comments

As part of using a feedstore that anyone can write to, I'm getting into the situation where writes fail in log.js#370. I'm guessing that it's due to the identity store of a peer only having its own key, and thus being unable to verify anyone else signatures (even though all the needed information seems be a part of the message).

After some hours of debugging, it turned out that the payload was to blame. Don't use objects, because properties might get reordered, and that will make your signatures be invalid.