Ross Nicoll 8e7165db41
CORDA-759: Enforce key checks on identity de-anonymisation (#1993)
Previously when de-anonymising a Party instance, the name of the Party was used rather than
the key, meaning a Party could be constructed with a random nonsense key and any name, and be treated as corresponding to the well known identity. This is not a security hole in itself as
in any real scenario a party shouldn't be trusted without having been registered, it creates
a significant risk of a security hole depending on how trusted the anonymous identity is, and
the returned identity is considered.
2017-11-17 18:13:35 +00:00
..
2017-09-22 16:51:14 +01:00
2017-10-07 12:48:16 +01:00
2017-09-22 15:14:16 +01:00
2017-10-07 12:48:16 +01:00
2017-09-29 17:42:49 +01:00
2017-11-14 15:24:02 +00:00
2017-10-09 11:32:03 +01:00
2017-09-05 17:38:53 +01:00