| … | … | @@ -7,7 +7,7 @@ |
| 7 | 7 | |
| 8 | 8 | ## Current Status |
| 9 | 9 | |
| 10 | | ✅ **Wirecore running**: PID 561597 |
| 10 | ✅ **Wirecore running**: PID 565149 |
| 11 | 11 | ✅ **Port**: 3000 |
| 12 | 12 | ✅ **Node version**: v22.20.0 |
| 13 | 13 | ✅ **Storage**: `./wirecore-web-storage/` (legacy server feed) |
| … | … | @@ -15,6 +15,7 @@ |
| 15 | 15 | ✅ **Public access**: https://7rnx.net/wirecore/ |
| 16 | 16 | ✅ **Git repo**: git://tabertron.local/wirecore.git |
| 17 | 17 | ✅ **Identity**: Browser-side (Phase 1 complete, ANProto-compatible) |
| 18 | ✅ **Security**: Signature verification (Phase 1.5 complete) |
| 18 | 19 | |
| 19 | 20 | ### Phase 1: Browser-Side Identity |
| 20 | 21 | |
| … | … | @@ -36,6 +37,16 @@ Each browser now generates its own ed25519 keypair: |
| 36 | 37 | - `557e642` - Add favicon |
| 37 | 38 | - `6fbef5d` - Fix keypair length (132 chars: 44 pubkey + 88 secretkey) |
| 38 | 39 | - `ac7b1b8` - Add auto-migration for old keypairs + reset button |
| 40 | - `7b9ab65` - Implement ANProto signature verification (Phase 1.5) |
| 41 | |
| 42 | ### Phase 1.5: Signature Verification (SECURITY) |
| 43 | |
| 44 | All posts are now cryptographically verified: |
| 45 | - **Verification**: ANProto.verifyMessage() on all posts |
| 46 | - **Public key check**: Signature must match claimed publicKey |
| 47 | - **Rejection**: Invalid signatures return 403 Forbidden |
| 48 | - **Protection**: Prevents impersonation attacks |
| 49 | - **Logging**: Successful verifications logged server-side |
| 39 | 50 | |
| 40 | 51 | --- |
| 41 | 52 | |