th4s/ethane

Ethane is an alternative web3 implementation with the aim of being slim and simple.

ethane's Issues

Discourage http basic authentication when not using TLS

It is currently possible to inject authorization headers into HTTP requests using Credentials when creating a connector over websocket or http.

This also means it would be possible to use basic authentication over a non-TLS connection. This is not good practice and susceptible to attacks since the password is sent in cleartext.

I feel we should discourage this use and return an error when trying to create a connector not using TLS and attempting to use http basic authentication.

This would include checking if a TLS connection is used AND the credentials are Some(Credentials::Basic(_)) for Connector::websocket and Connector::http and also introduce new error variants accordingly.

Ethane does currently not compile: "Multiple applicable items in scope"

There is currently an upstream issue with the funty package. Current workaround to make Ethane compile is to fix the version of the broken package:
cargo update -p funty --precise 1.1.0

Create docker-based development environment

• Create docker based development environment, and add a block explorer
• Rewrite tests to use it with fix account addresses

Contract interaction

It would be nice to have proper contract interaction based on JSON ABI. So I would open a discussion thread for that implementation.

Create CONTRIBUTING.md