As I understand, the client send the following information to server 1.the hash of the message, 2. public key 3. signature made by private key
And the server verified the signature with the public key and hash, to check if it belong to the certain private key, server also need to check if the public key correspond to the ripple address.
Am I right?
And I have seen that there is a public key recovery method for ECDSA signature.https://crypto.stackexchange.com/questions/18105/how-does-recovering-the-public-key-from-an-ecdsa-signature-work
If my previous judgement is right, then is it possible for client only send the signature and the hash to the server? I guess there is a problem because we can't derive the curve from both the signature and the hash.