ipfs-shipyard / ipfs-shipyard/pm-idm

Integrity check of the cryptography code provided by IDM Clients

Open
#39 2 comments 0 reactions 0 assignees View on GitHub
task
Dominant language
No language data
Stars
64
Forks
7
PR merge metrics
No merged PRs in 30d

Description

## Description

A valid [concern](https://github.com/ipfs-shipyard/pm-idm/pull/35#discussion_r255601390) was raised about cryptography being done by IDM Clients, which will be available in the form of SDKs for different languages. There should be a recommendation regarding integrity checks, such as checksums or similar mechanisms, to ensure that the IDM Client that DApp developers include were not tampered.

For the IDM Client for the Web, we may use https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity.

## Acceptance Criteria

- [ ] Create one or two paragraphs with recommendations about this topic in the IDM Concept paper

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.