diff options
| author | Gab Virebent <gabriel1@virebent.art> | 2026-07-01 17:41:47 +0200 |
|---|---|---|
| committer | Gab Virebent <gabriel1@virebent.art> | 2026-07-01 17:41:47 +0200 |
| commit | 71e4fd1593b1d708e4f41f5e5119689435ff956e (patch) | |
| tree | 4eb1791d00ffd39eb38300cd0681539389c19122 /ARCHITECTURE.md | |
| parent | c6bb0b76e72e1211a756823763846b9f528f5f4a (diff) | |
| download | nymdrop-71e4fd1593b1d708e4f41f5e5119689435ff956e.tar.gz nymdrop-71e4fd1593b1d708e4f41f5e5119689435ff956e.tar.xz nymdrop-71e4fd1593b1d708e4f41f5e5119689435ff956e.zip | |
Add client-side proof of work and fix X25519 WebCrypto API usage
Self-contained hashcash-style PoW on /submit: client finds a nonce so
SHA-256("<unix-ts>:<nonce>") has enough leading zero bits, sent as an
X-Nymdrop-Pow header; server verifies and rejects expired or replayed
stamps, no challenge round-trip required. Difficulty tunable via
--pow-difficulty without a rebuild.
Also fixes a latent bug in the browser crypto: X25519 was being
requested as ECDH with namedCurve "X25519", which is not a valid
WebCrypto combination and always throws. Modern WebCrypto exposes
X25519 as its own algorithm identifier.
Diffstat (limited to 'ARCHITECTURE.md')
0 files changed, 0 insertions, 0 deletions