Flajt / Flajt/decentproof-app

[Feedback appreciated]: Find a better way to store the signature

Open
#118 3 comments 0 reactions 0 assignees View on GitHub
App backend P0 🫵 FEEDBACK WANTED
Dominant language
Dart
Stars
3
Forks
0
PR merge metrics
No merged PRs in 30d

Description

Currently the system stores the signature as metadata with originstamp, however this is not that great, if originstamp would stop operations, it would be impossible to verify the signatures, as we may not be able to access them. A better way to store them is required.

Ideas:
- Embed them in the file, and strip it before calculating the hash (shouldn't be that hard to implement, just need to send the signature down after signing. It would however require adding a versioning metadata filed to check if we need to pull data from originstamp or the file)
- ???

Any thoughts on this matter are appreciated

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named. First map where signatures are currently stored as OriginStamp metadata and how verification retrieves them, then compare the proposed embedded-signature approach with the existing versioning and hash workflow. Done requires an agreed storage design that permits verification when OriginStamp is unavailable.

Written by the indexing model from the issue text.

Assessment

Tech stack
dart, flutter
Domain
mobile-dev, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.