Forwarded From GitHub
💬 New comment on Xray-core#4458 Questioning the Security of the REALITY Protocol
by @RPRX
> As @Abjust also mentioned, the name ‘password’ doesn’t imply that these need to be paired for authentication. I think it would be better to rename it to ‘clientKey’.
别 imply paired 了，歧义就出在 paired 上，**就该把服务端视作黑箱，而客户端只知道 password，别管它是什么，按密码保管就行**
Reply to this message to post a comment on GitHub.