fix: anchor transport resolution and authenticate v1 message senders - #659

Open

AndreaDiazCorreia wants to merge 12 commits into

mainfrom

fix/transport-downgrade-protection

Commits on Aug 20, 2026

test: add comprehensive coverage for NostrUtils.isValidEventSignature
AndreaDiazCorreia
committed
02d3a6f
test: verify kind-38385 info event signature before accepting
AndreaDiazCorreia
committed
47a6333
fix: reject superseded kind-38385 info events to prevent config rollback
AndreaDiazCorreia
committed
217f1f7
feat: add monotonic protocol version store to prevent transport downgrade attacks
AndreaDiazCorreia
committed
2af5eff
feat: anchor transport resolution to the highest verified protocol version
AndreaDiazCorreia
committed
da1ecd8
feat: unify transport resolution through anchoredProtocolVersionFor
AndreaDiazCorreia
committed
ed437c3
feat: authenticate NIP-59 seal signer to prevent message forgery
AndreaDiazCorreia
committed
d83ddec
fix: prevent protocol version store write reordering and clarify legacy version semantics
AndreaDiazCorreia
committed
c5508f6
fix: request info event without order history cutoff to prevent protocol version loss
AndreaDiazCorreia
committed
63041b7
feat: distinguish absent protocol_version from malformed to prevent misinterpreting unknown as legacy
AndreaDiazCorreia
committed
841cdc9
feat: apply NIP-01 addressable event ordering to info event replacement
AndreaDiazCorreia
committed
8a62ab0
fix: defer protocol version persistence until init merges early records to prevent session loss
AndreaDiazCorreia
committed
14f83f2