Conversation

Notices

1. Embed this notice
   Evan Prodromou (evan@cosocial.ca)'s status on Friday, 08-Mar-2024 05:24:21 JST Evan Prodromou

   • Eugen Rochko
   • Terence Eden
   • Brian Hawthorne
   • Erin 💽✨

   @bhawthorne @Edent @erincandescent @Gargron oh, yeah, thanks!

   • Embed this notice
     Evan Prodromou (evan@cosocial.ca)'s status on Friday, 08-Mar-2024 06:27:30 JST Evan Prodromou

     in reply to

     • Terence Eden

     @Edent at the end of this process, you can be very sure of the owner id.

     You can then compare the owner ID to the actor ID.

   • Embed this notice
     Terence Eden (edent@mastodon.social)'s status on Friday, 08-Mar-2024 06:27:31 JST Terence Eden

     in reply to

     @evan I still think there's a missing step. My thinking is...

     owner.publicKey is derived from sig_key.

     So if sig_key is lying about who its owner is, you're just comparing the same source twice, right?

     So I *think* it should be

     owner_id = get_id(sig_key.owner)
     Then
     if (owner_id == message.actor) ...

     Does that make sense?