summaryrefslogtreecommitdiffhomepage
path: root/doc/todo/verify_hash_chain_in_loadLog.mdwn
diff options
context:
space:
mode:
authorJoey Hess <joeyh@joeyh.name>2017-05-01 12:10:18 -0400
committerJoey Hess <joeyh@joeyh.name>2017-05-01 12:10:18 -0400
commit3717303618a0c36e71af2cac73f862a4c9053eb4 (patch)
tree3c1e7cd2c176dde0d7a07b7da849ba76780779f9 /doc/todo/verify_hash_chain_in_loadLog.mdwn
parentdc9f329dd64dc0f9c81aac239d66eb0ff9705f7c (diff)
downloaddebug-me-3717303618a0c36e71af2cac73f862a4c9053eb4.tar.gz
rename
Diffstat (limited to 'doc/todo/verify_hash_chain_in_loadLog.mdwn')
-rw-r--r--doc/todo/verify_hash_chain_in_loadLog.mdwn8
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/todo/verify_hash_chain_in_loadLog.mdwn b/doc/todo/verify_hash_chain_in_loadLog.mdwn
new file mode 100644
index 0000000..92f9741
--- /dev/null
+++ b/doc/todo/verify_hash_chain_in_loadLog.mdwn
@@ -0,0 +1,8 @@
+loadLog should verify the hashes (and signatures) in the log, and
+refuse to use logs that are not valid proofs of a session.
+
+(--replay and --graphvis need this; server's use of loadLog does not)
+
+Everything else in debug-me checks a session's proof as it goes.
+And, everything that saves a log file checks the proof as it goes,
+so perhaps this is not actually necessary?