chloe

> Which direction have we landed on? Using a redirect resource? yea using a redirect resource because it doesn't require an external dependency - have a [brief doc](https://docs.google.com/document/d/1ct0d9z0ZHrxU6uSatnjzBLAgdOPcfPcys3QkKzXr2WU/edit?usp=sharing) on this

resource account tutorial PR: https://github.com/aptos-labs/aptos-core/pull/4097 resource account command PR: https://github.com/aptos-labs/aptos-core/pull/5354

> @chloeqjz / @alinush is the current plan to wait until we have the new domain separation? yes! we communicated on slack

we have an [AIP](https://github.com/aptos-labs/aips/commit/afcdbb09edc01277761d880b173d8cda6b0d3c1e#diff-b7d77f2b2b802a214c5b3fa57ca3bfbce1b0db944313890596080e8e11e20b09) for domain-separated signature. this means that we're changing the signature verification scheme. we'll get back to this PR after the domain-separated signature work is done.

I don't think doing things ad-hoc is good for security and we'd only proceed with PRs with signature verifications once the domain separation work is done. Moreover, even if we...

> For replay attacks, we can add `chainId` to the challenge struct or type_info struct to prevent it. I don't think use signer to prevent replay attacks is a good...

hey can you guys give guidance on how we can reproduce the errors? @songliling @ozgur3512

> @chloeqjz Thank you for your reply, I solved the error problem, the more reason is that I don't understand the mechanism of aptos, I modified the contract code to...

to address this issue, we - added an explicit error message to the resource_account module: https://github.com/aptos-labs/aptos-core/pull/5378 - added an command to run `create_resource_account_and_publish_package`: https://github.com/aptos-labs/aptos-core/pull/5354 - updated the NFT tutorial to...

> Can anybody describe me how to solve "Simulation failed with status: Move abort in 0x1::resource_account: 0x60001" issue? Please help me. Thanks in advance. Hi, it means that the specified...