Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

http检索支持共用rpc端口可能有安全隐患 #382

Open
1 of 3 tasks
litai686 opened this issue Jul 13, 2023 · 0 comments
Open
1 of 3 tasks

http检索支持共用rpc端口可能有安全隐患 #382

litai686 opened this issue Jul 13, 2023 · 0 comments
Labels
C-community Category: community issues C-enhancement Category: feature enhancement P1 High - we should be working on this now or in the immediate future

Comments

@litai686
Copy link

Droplet / 水滴

  • droplet
  • droplet-client
  • 文档 / docs

Description / 描述

droplet 支持http是一个非常好的idea，但发现这个功能共用了rpc端口，rpc服务功能比较多，而且可以操作钱包签名，一般是内部人员使用，不会把端口直接爆漏在公网， 虽然有鉴权机制，但从安全性角度来说，检索应该独立一个服务实现，检索毕竟属于公开的服务，不需要鉴权，不应该跟内部功能性的rpc共用端口，所以建议把检索服务独立一个http单独去实现。
@litai686 litai686 added the C-enhancement Category: feature enhancement label Jul 13, 2023
@Fatman13 Fatman13 added the C-community Category: community issues label Jul 14, 2023
@elvin-du elvin-du added the P1 High - we should be working on this now or in the immediate future label Jul 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
C-community Category: community issues C-enhancement Category: feature enhancement P1 High - we should be working on this now or in the immediate future
Projects
Venus Team Project(s)
Status: No status
Milestone
No milestone
Development

No branches or pull requests
3 participants
@Fatman13 @elvin-du @litai686