dandri/simplex-chat
1
0
Fork 0
mirror of https://github.com/simplex-chat/simplex-chat.git synced 2026-10-05 23:07:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

badge service: name what makes accepting unverified receipts safe

Browse Source
This commit is contained in:
spaced4ndy
2026-09-29 18:20:28 +04:00
parent 1b0e165b67
commit f65d4a69a9
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/simplex-badge-service/README.md
+3 -3
View File
@@ -231,9 +231,9 @@ token as given. It applies to both run modes, since `--run-cli` answers service
the service logs a warning at every start while it is on. Off by default, and only `on`/`off`
parse.
With it on, anyone who can reach the service address can mint badges by sending a made-up receipt,
signed with the issuer key, which startup requires to be one clients trust. Turn it on only where
no one else can reach the service.
With it on, anyone who can reach the service address can mint badges by sending a made-up receipt.
That is harmless only while this deployment signs with an issuer key released apps do not carry, so
they refuse what it signs — never turn it on where the key is one those apps trust.
## Issuing codes