I reply to all queries on the forums and via email, once per day, Monday to Friday (not weekends).

If you are new here, please see some information on how to ask for support. Thank you!

Security question

dashed-slug.net › Forums › General discussion › Security question

Tagged: , , , ,

Viewing 1 post (of 1 total)
  • Author
    Posts
  • January 3, 2019 at 8:14 am #5451
    alexg
    Keymaster

    Hello,

    As you saw, the notification API accepts TXIDs from anyone (but not confirmation counts). Then, the plugin queries the wallet about these transactions by their ID. The plugin will only insert a transaction to the DB if it concerns a user on the system and if it is valid according to the wallet. The API endpoint is very simple and secure. It does not need to trust the caller.

    The same is true with blocks but blocks are not currently being used in anything. The hook is available for future use.

    with regards

  • Author
    Posts
Viewing 1 post (of 1 total)
  • You must be logged in to reply to this topic.