How can I validate that a request is originating from a particular canister?

Developers Rust
21

We can already set headers from inside a canister. How would this be different?

A rogue actor impersonating our canisters could add the “From-Canister-Id” header when sending requests to our service is what I understand.

Please elaborate if I’m missing something :slight_smile:

22

Yeah, well the system making the request can disallow the canister from setting that particular header and overwrite it

1 Like