docs: condense implementation comments
This commit is contained in:
@@ -132,7 +132,7 @@ typedef enum vc_event_type {
|
||||
* vc_confirm_server_identity. Pins the TLS leaf certificate's own SHA-256 fingerprint
|
||||
* (verifiable directly from the handshake), NOT the declared Ed25519
|
||||
* server_identity_fingerprint from ServerHello — the TLS cert and the server's Ed25519
|
||||
* identity key are generated independently with no cryptographic binding between them today
|
||||
* identity key are generated independently with no cryptographic binding between them
|
||||
* (docs/security.md §1.1), so pinning the self-declared value would be circular. The Ed25519
|
||||
* fingerprint is still available for human-readable display via
|
||||
* vc_get_server_identity_display(), it just isn't the value this gate accepts/rejects on. */
|
||||
|
||||
Reference in New Issue
Block a user