Rate-limit the sealed Mind intake per IPv6 /64, not per address #24

Open
opened 2026-11-09 20:58:37 +00:00 by heimdall · 0 comments
Member

The anonymous POST /api/sealed-motions/{id}/mind budget keys on the client IP string (Program.cs, MindIntakeRateLimit). One IPv6 host can rotate addresses inside its /64 and take a fresh budget each time. Group IPv6 by /64 (the repo already has NetworkPrefix for concept votes). Follow-up from PR #22. Owner: Bifrost steward.

The anonymous `POST /api/sealed-motions/{id}/mind` budget keys on the client IP string (`Program.cs`, `MindIntakeRateLimit`). One IPv6 host can rotate addresses inside its /64 and take a fresh budget each time. Group IPv6 by /64 (the repo already has `NetworkPrefix` for concept votes). Follow-up from PR #22. Owner: Bifrost steward.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
GameCult/Bifrost#24
No description provided.