Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warn about sharing of secrets #14

Open
conorsch opened this issue Nov 2, 2022 · 0 comments
Open

Warn about sharing of secrets #14

conorsch opened this issue Nov 2, 2022 · 0 comments

Comments

@conorsch
Copy link
Contributor

conorsch commented Nov 2, 2022

The bot is designed to disburse funds to any valid penumbra wallet address, currently prefixed with penumbrav2t. Folks new to the platform may mistakenly share secrets, such as a full viewing key. Let's consider warning those folks about the need to rotate those secrets if shared in the bot channel. For reference, see the list of BECH32_PREFIX values in https://github.com/penumbra-zone/penumbra/blob/main/proto/src/serializers/bech32str.rs#L168

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant