mirror of
https://github.com/simplex-chat/simplex-chat.git
synced 2026-08-16 06:50:12 +00:00
The transport-verified Ed25519 signer key already uniquely identifies and authenticates an order, so the separate client-generated orderId is redundant. Remove it from the wire, DB, and recovery: orders are keyed by order_key; signing becomes mandatory (no key = no order); the client backs up only order_sk (order_key is its public part). Two Stripe steps correlate by the shared signer key; Stripe client_reference_id=order_key.