Age | Commit message (Collapse) | Author | Files | |
---|---|---|---|---|
2024-08-13 | [security] harden account update logic (#3198) | 1 | ||
* on account update, ensure that public key has not changed * change expected error message * also support the case of changing account keys when expired (not waiting for handshake) * tweak account update hardening logic, add tests for updating account with pubkey expired * add check for whether incoming data was via federator, accepting keys if so * use freshest window for federated account updates + comment about it |