diff options
Diffstat (limited to 'core/api-exchange.rst')
| -rw-r--r-- | core/api-exchange.rst | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/api-exchange.rst b/core/api-exchange.rst index 97f7d75f..b352e46d 100644 --- a/core/api-exchange.rst +++ b/core/api-exchange.rst @@ -887,7 +887,7 @@ exchange. The client currently does not have to demonstrate knowledge of the private key of the reserve to make this request, which makes the reserve's public key privileged information known only to the client, their bank, and the - exchange. In future, we might wish to revisit this decision to improve + exchange. In the future, we might wish to revisit this decision to improve security, such as by having the client EdDSA-sign an ECDHE key to be used to derive a symmetric key to encrypt the response. This would be useful if for example HTTPS were not used for communication with the exchange. |