buzz/desktop/src-tauri at duncan/dm-e2e-encryption - buzz

mirror of https://github.com/block/buzz.git synced 2026-08-18 06:50:31 +02:00

Files

T

History

Will Pflegerandnpub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7 86eb20f594 docs(security): document E2E gate None-arm and get_nsec key-scope caveat

Two comment-only fixes from Thufir's security review of PR #1185:

- ingest.rs: add explicit comment on the channel_id == None arm of the
  E2E latch gate explaining why the silent skip is safe (channel-less
  events cannot be latched; rejected downstream at insert).

- lib.rs: add comment near get_nsec registration scoping the 'private
  key never leaves Rust' property to the nip44_encrypt/decrypt commands
  and noting get_nsec as a tracked follow-on hardening item.

- check-file-sizes.mjs: bump lib.rs ceiling (1034 → 1044, +8 comment
  lines) and tauri.ts ceiling (1218 → 1231, main grew since rebase).

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>

2026-06-25 17:55:44 -04:00