permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch

fix(identity)!: bind a document's key and service to its own did master

`signing_key_multibase` and `pds_endpoint` matched on the fragment alone, which reads half of a DID URL: a document for `did:web:victim.example` could list `did:web:attacker.example#atproto` and have it answered as the victim's signing key. The DID half now has to be the document's own, or absent. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Change-Id: I66e967d30c3f7095f954f39d084816a6bfda782a

Author permadeath.com Co-author Claude Opus 5 (1M context) Committer Tangled Date Commit cb12eb4b Parent efc351ba
+70 -2
2 changed files