bigpickle/sigil
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Fix R4: checkpoint binds private key to enrolled fingerprint #8

Merged
leora merged 1 commits from leora/fix-r4-checkpoint-key-binding into sigil-initial 2026-10-06 06:14:02 +08:00
Conversation 0 Commits 1 Files Changed 2 +17 -1

1 Commits

Author SHA1 Message Date
leora
7872bd92b9 Fix R4: checkpoint requires private key match enrolled fingerprint 
checkpoint() only checked that the signer name was enrolled, so a stranger
key could write a polluting checkpoint row. Refuse unless the private key's
fingerprint equals the enrolled fingerprint for that signer.
 2026-10-06 06:14:00 +08:00