You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While writing the spec, I realized that we do not check the address of the tx sender for submitting proof.
Should we restrict that? While I don't necessarily see any problems with leaving it open, my intuition says we should restrict it. Restricting also does not affect anything IMHO, but may prevent some potential issues?
The text was updated successfully, but these errors were encountered:
I don't know. I left it open, because I didn't want to restrict scenarios where the sending of the transaction is outsourced to some other party. An aggregator could be the other party later on. But then we'll end up changing submitProof() anyway.
And maybe we don't want hosts to outsource this stuff...
While writing the spec, I realized that we do not check the address of the tx sender for submitting proof.
Should we restrict that? While I don't necessarily see any problems with leaving it open, my intuition says we should restrict it. Restricting also does not affect anything IMHO, but may prevent some potential issues?
The text was updated successfully, but these errors were encountered: