Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate mitigation of late publishing attacks #26

Open
m0ar opened this issue Nov 29, 2023 · 2 comments
Open

Investigate mitigation of late publishing attacks #26

m0ar opened this issue Nov 29, 2023 · 2 comments
Assignees
Labels
documentation Improvements or additions to documentation

Comments

@m0ar
Copy link
Collaborator

m0ar commented Nov 29, 2023

Sidetree implementations are susceptible to late publishing attacks, which traditionally isn't a big issue if the only vector is changing the user's own keys. But here, having an old, anchored, and unpublished fork acts as a publish undo button.

Is there a way for the ceramic client to save old forks, and can a new client request full fork history from the network? Can we build some other transparent index allowing deterministic resolution in these cases?

@m0ar m0ar added the documentation Improvements or additions to documentation label Nov 29, 2023
@m0ar
Copy link
Collaborator Author

m0ar commented Dec 4, 2023

In parallel with some direct discussions with the Ceramic team, I created a forum thread in the protocol section around network communication of "archived tips": https://forum.ceramic.network/t/trace-verifiability-of-the-late-publishing-attacks/1392

@m0ar
Copy link
Collaborator Author

m0ar commented Dec 19, 2023

The planned multi-prev consensus change will make this much less impactful, potentially zero so:
CIP: https://cips.ceramic.network/CIPs/cip-145
Discussion: https://forum.ceramic.network/t/cip-145-multiple-previous-multi-prev/1277

@m0ar m0ar self-assigned this Dec 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

1 participant