Post #903

💬New comment onXray-core#4458 Questioning the Security of the REALITY Protocol by @RPRX > As @Abjust also mentioned, the name 'password' doesn't imply that these need to be paired for authentication. I think it would be better to rename it to 'clientKey'. 别 imply paired 了，歧义就出在 paired 上，**就该把服务端视作黑箱，而客户端只知道 password，别管它是什么，按密码保管就行** Reply to this message to post a comment on GitHub.