Google Git
Sign in
vanadium / release.go.x.ref / 344bbdf5657f8bb681c0aa5bf0fad5e9728e1976
commit344bbdf5657f8bb681c0aa5bf0fad5e9728e1976[log] [tgz]
authorAnkur <ataly@google.com>Thu May 07 18:26:15 2015 -0700
committerAnkur <ataly@google.com>Thu May 07 18:26:22 2015 -0700
treebeb1f2a0d63bf900844b7a951470532411da86d6
parentfe9b3e9447c5f3d1a9c337d9ebc3bb2e85de8fb2 [diff]
"x/ref": Never recognize a root for AllPrincipals

There is no good reason for a principal to recognize a root (public key)
for all blessing names. On the other hand, doing so makes the root
principal impersonate all other identity providers when talking to
the recognizing principal.

Therefore, this CL forbids BlessingRoots.Add from being call with
the AllPrincipals blessing pattern.

Change-Id: I750de9b7d86b640055509d50e85c1776171a8581
2 files changed
tree: beb1f2a0d63bf900844b7a951470532411da86d6
  1. cmd/
  2. envvar/
  3. examples/
  4. internal/
  5. lib/
  6. profiles/
  7. services/
  8. test/
  9. .gitignore
  10. AUTHORS
  11. CONTRIBUTORS
  12. LICENSE
  13. PATENTS
  14. README.md
  15. VERSION
README.md

Vanadium

This repository contains a reference implementation of the Vanadium APIs.

Unlike the APIs in https://github.com/vanadium/go.v23, which promises to provide backward compatibility this repository makes no such promises.