From f3f2e40dc3126fa899adde2e5e71e454bd2935ac Mon Sep 17 00:00:00 2001 From: themighty1 Date: Fri, 21 Jul 2023 17:41:38 +0300 Subject: [PATCH] add deprecation notice --- README | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/README b/README index ddfe242..6de694c 100644 --- a/README +++ b/README @@ -1,3 +1,15 @@ +# Deprecation notice + +This notary server implementation was meant to interact with the PageSigner client. +PageSigner used an old TLSNotary protocol which is unaudited, experimental, and deprecated. +A vulnerability was discovered in PageSigner on 19th Jul 2023 allowing the prover to create arbitrary proofs, thus the proofs created with PageSigner must not be trusted. + +This repository will not receive any updates and is archived for historical purposes. + +------------------------------------------------------------------------------------ + + + This is the notary server for the TLSNotary protocol. It is primarily intended to be run inside a sandboxed AWS EC2 instance (https://github.com/tlsnotary/pagesigner-oracles). It can also be run as a regular server (you'll have to start it with --no-sandbox and pass the file public.key to the client).