Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance Security: Restrict GnoKey to Official Chains #44

Open
iuricmp opened this issue Feb 19, 2025 · 1 comment
Open

Enhance Security: Restrict GnoKey to Official Chains #44

iuricmp opened this issue Feb 19, 2025 · 1 comment
Labels
🚀 feature-request :rocket: feature-request

Comments

@iuricmp
Copy link
Collaborator

iuricmp commented Feb 19, 2025

During the Contributors Call, Jae raised a concern regarding the security of Gnokey. Specifically, there is currently no mechanism to prevent users from interacting with non-official chains. To enhance security, we should consider implementing a solution that restricts Gnokey to only interact with an official list of chains

Proposed Solution

  • Maintain an official list of chains in a GitHub repository.
  • Gnokey should fetch and validate against this list before allowing interactions.

Additional Considerations

  • Should there be an override flag for developers/testnets?
@iuricmp iuricmp added the 🚀 feature-request :rocket: feature-request label Feb 19, 2025
@jefft0
Copy link
Collaborator

jefft0 commented Feb 19, 2025

This could be achieved by simply removing the "Custom chain" button. But this button is pretty useful (and Adena also has it).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🚀 feature-request :rocket: feature-request
Projects
None yet
Development

No branches or pull requests

2 participants