Context
It's a web app. So we shouldn't trust client in the first place. There is some validation built in the client side logic, but that can be skipped if someone prepares his own version of client.
What
Validation of client side. When connection between leader & follower is being setup, we could check for some token related to a build version; hash of js assets.
Thanks to that we will gain
- some sense of extra security
- ensuring all key holders are on the same version of client so no weird behaviour
Context
It's a web app. So we shouldn't trust client in the first place. There is some validation built in the client side logic, but that can be skipped if someone prepares his own version of client.
What
Validation of client side. When connection between leader & follower is being setup, we could check for some token related to a build version; hash of js assets.
Thanks to that we will gain