Content
@
https://warpcast.com/~/channel/fc-devs
0 reply
0 recast
0 reaction
vrypan |--o--|
@vrypan.eth
Can the miniapp sdk provide a proof to the miniapp that the context is provided by a specific client? I think it's trivial to fake that you are a "legit" client sending data to a miniapp. This may not be critical in the onchain-tx way, but it can spam, overload, or fake data that are important for a miniapp. It would be nice if frameContext was signed by frameContext.client.clientFid, to allow a miniapp verify that the context can be trusted IF they trust clientFid.
4 replies
0 recast
2 reactions
dylan
@dylsteck.eth
yeah I agree, not solved yet but 100% something on my mind and that needs to be solved in the near term
0 reply
0 recast
1 reaction
