GitHub PushEvent at 2014-11-18 20:56:40
Repository: xia-core
Actor: nitinkgupta
Payload: {"shas":[["5b15d8bd3163d57b8f6d9607aa2be6823fcfb0b2","8bc144fb45f6ab0783836d341a80266800171e5f@cmu.edu","SYNACK verifies DAG changed by rendezvous service\n\nWhen a SYN request is received after modification by the rendezvous\nservice, the SYNACK sent to the client includes a verification payload\nsigned by the mobile service and the mobile service public key. The\nclient checks to make sure that the SYNACK came from the same DAG it\nsent the SYN to. If not, it looks for a signed verification from the\nmobile service before accepting the rendezvous modified DAG. Only after\nthe signature is verified and the public key matches the remote SID do\nwe allow alteration of the mobile service DAG at the client side.","Nitin Gupta",true]],"size":1,"ref":"refs/heads/intrinsic_security","head":"5b15d8bd3163d57b8f6d9607aa2be6823fcfb0b2"}