Skip to content

Commit e58a78a

Browse files
committed
chore: make explicit non-tls only available in testing
1 parent 678114c commit e58a78a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/explanations/network_doc.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -89,7 +89,7 @@ The custom TLS verifier (`AttestedServerVerifier` and `AttestedClientVerifier`)
8989

9090
### Non-TLS Configuration (*INSECURE*)
9191

92-
**THIS CONFIGURATION IS INSECURE**
92+
**THIS CONFIGURATION IS INSECURE AND REQUIRES TO COMPILE THE `core/threshold` CRATE WITH THE `insecure` FEATURE**
9393

9494
* **No Authentication at L6/7:** Without TLS, the gRPC server has no cryptographic way to verify the identity of the client. It trusts that any connection to its port is from a legitimate peer, and blindly trust the peer is whom it claims to be in the message's tag.
9595
* **Risk:** Any attacker can impersonate an MPC node, potentially corrupting or exfiltrating data from the computation. This mode should only be used for testing.

0 commit comments

Comments
 (0)