-
Notifications
You must be signed in to change notification settings - Fork 4
Add optional signatures for verification #72
Copy link
Copy link
Open
Labels
discussion-neededA solution still needs to be determinedA solution still needs to be determineddistributed_opsAspects of a distributed operation, networked or on a nodeAspects of a distributed operation, networked or on a nodeenhancementNew feature or requestNew feature or requestmessagesConcerns the message formatConcerns the message format
Description
Metadata
Metadata
Assignees
Labels
discussion-neededA solution still needs to be determinedA solution still needs to be determineddistributed_opsAspects of a distributed operation, networked or on a nodeAspects of a distributed operation, networked or on a nodeenhancementNew feature or requestNew feature or requestmessagesConcerns the message formatConcerns the message format
Zeromq allows encryption and authentication.
it might be good to allow security.
However, that would only secure the communication between Components and their Coordinators.
you have to trust your coordinator itself and that the other Component is authentic.
Another idea would be to add a signature in the last frame. That allows to verify the authenticity of a message end to end.