Project

General

Profile

Actions

Bug #1642

closed

validator-conf must verify timestamp for command Interests

Added by Alex Afanasyev over 10 years ago. Updated over 10 years ago.

Status:
Closed
Priority:
High
Assignee:
Category:
Security
Target version:
Start date:
05/29/2014
Due date:
% Done:

100%

Estimated time:

Description

Right now, validator-conf completely ignores timestamp in command Interests and validates just signature. Validating signature of Interests without validating the timestamp doesn't have much merit. Unless there is a valid use case, validation should always include checking timestamp (and remembering the last one used).

At most, validator conf can contain an additional flag to disable such checking, but the default behavior should still be "verify timestamp".


Related issues 1 (0 open1 closed)

Blocks NFD - Bug #1643: nrd: Incorrect command interest validationClosedYingdi Yu05/29/2014

Actions
Actions #1

Updated by Yingdi Yu over 10 years ago

  • Status changed from New to Code review
  • % Done changed from 0 to 100
Actions #2

Updated by Alex Afanasyev over 10 years ago

  • Blocks Bug #1643: nrd: Incorrect command interest validation added
Actions #3

Updated by Yingdi Yu over 10 years ago

  • Status changed from Code review to Closed
Actions

Also available in: Atom PDF