Comments (4)
sichen1234
commented on May 28, 2024
1
Initially we can just secure it by restricting access to known IP addresses. This is adequate for a scenario where each client app (ie from an auditor) accesses the chain code through its own REST api.
from blockchain-carbon-accounting.
udosson
commented on May 28, 2024
This would be a simple and effective first step. How would you secure access to the frontend which is connected to the REST API?
I put together a task for the Open Climate Collbathon. Have a look at the google doc under the section CLIENT | SDK Task 1: Secure REST API
https://docs.google.com/document/d/1PYKffkyAAAyyFiYsLqFk3_8T52-GkJHA8BLCbwx-QMg/edit?usp=sharing
from blockchain-carbon-accounting.
sichen1234
commented on May 28, 2024
If only one client can access the REST API and then the ledger, then the
client is responsible for providing its own security for its users. The
scenario is that
1. there is a network of nodes,
2. each node is run by/for one of the organizations, ie an auditor,
approved by the other organizations of the node
3. each auditor can access its node and only its node through a rest api,
4. each auditor runs its own application and is responsible for securing
it.
…-----
Si Chen
Open Source Strategies, Inc.
Video: Fighting Climate Change with Blockchain and Open Source
<https://youtu.be/NgxNWXa_IjE>
On Sat, Nov 14, 2020 at 8:03 AM Robin Klemens ***@***.***> wrote:
This would be a simple and effective first step. How would you secure
access to the frontend which is connected to the REST API?
I put together a task for the Open Climate Collbathon. Have a look at the
google doc under the section CLIENT | SDK Task 1: Secure REST API
https://docs.google.com/document/d/1PYKffkyAAAyyFiYsLqFk3_8T52-GkJHA8BLCbwx-QMg/edit?usp=sharing
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<opentaps#32 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AANAS4JK3E74S5WGXNPI3HTSP2S4VANCNFSM4TSU2TLQ>
.
from blockchain-carbon-accounting.
sichen1234
commented on May 28, 2024
Replacing this with #100 and closing this one.
from blockchain-carbon-accounting.
Related Issues (20)
- request emissions audit UI allow other request, supported by document HOT 1
- Add dataLoader scripts for product table HOT 1
- Calculation error for emission factor & unit consistency. HOT 2
- Dynamic loading of node-fetch
- separate deploy js for carbon tracker HOT 2
- remove open zeppelin contract upgradability HOT 1
- Create a MAINTAINERS.md file HOT 1
- Remove upgradability from CarbonTracker HOT 4
- loading of oil and gas data HOT 2
- Using Google travel impact model
- Adopt Typescript 3.0 references and composite tsconfig.json setting?
- Private Key exposure during Wallet signup HOT 4
- scripts and documentation for deploying Fabric chain code using Bevel
- scripts and documentation for deploying Solidity smart contracts to Besu using Bevel
- UI to select multiple data points for an audited emissions certificate HOT 4
- Disallow operations on the network with server side stored private key HOT 14
- deploy solidity contracts locally with bevel scripts HOT 1
- Link to Voluntary Offsets Directory is broken HOT 5
- not able to issue carbon tracker tokens HOT 1
- problem loading oil and gas data HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from blockchain-carbon-accounting.