bigpickle/sigil
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Fix N3: dedicated rekey rate-limit bucket; charge only on failure #14

Merged
leora merged 1 commits from leora/fix-n3-rekey-rate-bucket into sigil-initial 2026-10-06 06:22:50 +08:00
Conversation 0 Commits 1 Files Changed 3 +48 -10

1 Commits

Author SHA1 Message Date
leora
fae03444af Fix N3: dedicated rekey rate-limit bucket; charge only on failure 
enrol_rekey shared the enrol: bucket and metered before auth, so junk
calls could lock out incident-response rekey. Use a separate rekey:
bucket and charge it only after a bad bootstrap secret, so a valid seed
always proceeds.
 2026-10-06 06:22:48 +08:00