Skip to content

Commit

Permalink
docs(overlay): add URL of blog post and clarify wording (XRPLF#4635)
Browse files Browse the repository at this point in the history
  • Loading branch information
ckeshava authored and sophiax851 committed Jun 12, 2024
1 parent f7b6c06 commit f33d243
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 4 deletions.
9 changes: 5 additions & 4 deletions src/ripple/overlay/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -343,10 +343,11 @@ messages for the local and remote endpoints, and combine them to generate a uniq
"fingerprint". By design, this fingerprint should be the same for both SSL/TLS
endpoints.

That fingerprint, which is never shared over the wire (since each endpoint will
calculate it independently), is then signed by each server using its public
**`secp256k1`** node identity and the signature is transferred over the SSL/TLS
encrypted link during the protocol handshake phase.
That fingerprint is calculated by each endpoint independently, so the
fingerprint is never transmitted over the network. Each server then utilizes its
private key to sign the fingerprint. This is the same keypair that determines
the server's public `secp256k1` node identity. The signature is transferred over
the secure SSL/TLS encrypted link during the protocol's initial handshake phase.

Each side of the link will verify that the provided signature is from the claimed
public key against the session's unique fingerprint. If this signature check fails
Expand Down
4 changes: 4 additions & 0 deletions src/ripple/overlay/ReduceRelayCommon.h
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,10 @@

namespace ripple {

// Blog post explaining the rationale behind reduction of flooding gossip
// protocol:
// https://xrpl.org/blog/2021/message-routing-optimizations-pt-1-proposal-validation-relaying.html

namespace reduce_relay {

// Peer's squelch is limited in time to
Expand Down

0 comments on commit f33d243

Please sign in to comment.