[bisq-network/bisq] Add protection tools (#2787)

Christoph Atteneder notifications at github.com
Tue Apr 30 11:25:52 UTC 2019


ripcurlx commented on this pull request.



> +                proto.getWitnessHash().toByteArray(),
+                proto.getSignature().toByteArray(),
+                proto.getSignerPubKey().toByteArray(),
+                proto.getWitnessOwnerPubKey().toByteArray(),
+                proto.getDate());
+    }
+
+
+    ///////////////////////////////////////////////////////////////////////////////////////////
+    // API
+    ///////////////////////////////////////////////////////////////////////////////////////////
+
+    @Override
+    public boolean isDateInTolerance() {
+        // We don't allow older or newer then 1 day.
+        // Preventing forward dating is also important to protect against a sophisticated attack

The date is not part of the hash. Is this by intent? 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/bisq/pull/2787#pullrequestreview-232116026
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20190430/4adc1ba4/attachment.html>


More information about the bisq-github mailing list