diff options
author | Christian Grothoff <christian@grothoff.org> | 2019-10-17 11:16:19 +0200 |
---|---|---|
committer | Christian Grothoff <christian@grothoff.org> | 2019-10-17 11:16:19 +0200 |
commit | 02e8f7703d16d02f0315a019f42584d51484a3cb (patch) | |
tree | 98f4919bf59c39698b4c8ceaf59cd4736dbd072b | |
parent | 608d5ce9438df564497f3fd69b267f59cb230975 (diff) | |
download | docs-02e8f7703d16d02f0315a019f42584d51484a3cb.tar.gz docs-02e8f7703d16d02f0315a019f42584d51484a3cb.tar.bz2 docs-02e8f7703d16d02f0315a019f42584d51484a3cb.zip |
spec fix
-rw-r--r-- | anastasis.rst | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/anastasis.rst b/anastasis.rst index 3dcc4ce..a3728ba 100644 --- a/anastasis.rst +++ b/anastasis.rst @@ -326,7 +326,7 @@ malicious policy, a user can still retrieve an older version of the policy to recover access to their data. This append-only storage for policies still leaves a strong adversary with the option of uploading many policies to exhaust the Anastasis server's capacity. We limit this attack by requiring a -policy upload to include a reference to a **payment secret** from a payment +policy upload to include a reference to a **payment identifier** from a payment made by the user. Thus, a policy upload requires both knowledge of the **identity** and making a payment. This effectively prevents and adversary from using the append-only policy storage from exhausting Anastasis server @@ -400,7 +400,7 @@ Receiving Terms of Service // Amount required per policy upload. Note that the amount is NOT charged additionally // to the monthly_storage_fee. Instead, when a payment is made, the amount is // divided by the policy_upload_fee (and rounded down) to determine how many - // uploads can be made under the associated **payment secret**. + // uploads can be made under the associated **payment identifier**. policy_upload_ratio: Amount; // maximum policy upload size supported |