Delivery-date: Sat, 06 Apr 2024 23:19:15 -0700
Sender: bitcoindev@googlegroups.com
Date: Sat, 6 Apr 2024 22:57:16 -0700 (PDT)
From: Ali Sherief <ali@notatether.com>
To: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Message-Id: <a358aaac-62d5-4d30-a599-40c94da66c4fn@googlegroups.com>
Subject: [bitcoindev] Security implications of using pseudorandom JSON-RPC IDs
MIME-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_253938_1775543737.1712469436286"
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com

------=_Part_253938_1775543737.1712469436286
Content-Type: multipart/alternative; 
	boundary="----=_Part_253939_703445326.1712469436286"

------=_Part_253939_703445326.1712469436286
Content-Type: text/plain; charset="UTF-8"

I am trying to figure out how the Bitcoin Core RPC server stores the 
UniValue JSON-RPC requests.

The reason being is because I have an application that uses pseudorandom 
IDs for the JSON-RPC calls, and I'm trying to make sure that Core isn't 
going to send me someone else's JSON-RPC response if somebody else happens 
to be making a request with that ID at the same instant, which could be a 
potential security issue.

So far I don't have any leads on the Github codebase yet, but I'm still 
looking.

Anyway I would appreciate if someone would clarify this topic for me.

---
Ali

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bitcoindev/a358aaac-62d5-4d30-a599-40c94da66c4fn%40googlegroups.com.

------=_Part_253939_703445326.1712469436286
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I am trying to figure out how the Bitcoin Core RPC server stores the UniVal=
ue JSON-RPC requests.<div><br /></div><div>The reason being is because I ha=
ve an application that uses pseudorandom IDs for the JSON-RPC calls, and I'=
m trying to make sure that Core isn't going to send me someone else's JSON-=
RPC response if somebody else happens to be making a request with that ID a=
t the same instant, which could be a potential security issue.</div><div><b=
r /></div><div>So far I don't have any leads on the Github codebase yet, bu=
t I'm still looking.</div><div><br /></div><div>Anyway I would appreciate i=
f someone would clarify this topic for me.</div><div><br /></div><div>---</=
div><div>Ali</div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com">bitcoind=
ev+unsubscribe@googlegroups.com</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/bitcoindev/a358aaac-62d5-4d30-a599-40c94da66c4fn%40googlegroups.=
com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d/msg=
id/bitcoindev/a358aaac-62d5-4d30-a599-40c94da66c4fn%40googlegroups.com</a>.=
<br />

------=_Part_253939_703445326.1712469436286--

------=_Part_253938_1775543737.1712469436286--