Long Term R&D: Integration with the Ethereum Network

[domwoe]

@dieter.sommer

We had a really interesting discussion with gateway.fm , a startup from Scandinavia that provides APIs for Ethereum and some other chains. They were quite open towards adding functionality to allow API calls to be authorized with subnet signatures instead of API keys. This would solve, at least for this API provider, the problem of API keys being exposed if data of one IC node of the subnet the canister holding the API key is on is exposed.

How would the flow work here? Would they fetch requests from the canister? With HTTPS outcalls you have the issue that the certificate is only available in query calls. If you’d want to use HTTPS outcalls it would be simpler to allow authentication with tECDSA signature, wouldn’t it?