Skip to content

Boost metadata can be faked, like an email From address

you can always fake a TLV record. There's no, there's no confirmation to that. Did it say that you can fake all? I mean, you can fake the TLVs. It's like, it's like an email. You can, like, you can put anything in the from address.

Episode 198: Domain Experts (episode page, opens in a new tab) October 25, 2024, 2:10 p.m. CT 01:25:33 (play audio from this timestamp, opens in a new tab)

Speaker-labeled

Summary

Don't treat boost TLV metadata (sender name, app, message) as verified. Like an email From address, anyone can put anything in it, and nothing confirms it.