search

AlessandroStaffolani / shamir-fido

Project for a simple electron application that uses shamir's secret sharing and FIDO 2-factor-authentication
MIT License
1 stars 0 forks source link

Use ssl instead of encryption pin #15

Closed AlessandroStaffolani closed 5 years ago

AlessandroStaffolani commented 5 years ago

Socket connection should be protected by SSL https://github.com/ale8193/shamir-fido/blob/24d7b3d9fad6e8e129ba758fe73758da218b6f43/src/socket/SocketServer.js#L17

AlessandroStaffolani commented 5 years ago

For simplicity we can use a random pin (changed in every new connection) with the size of 256 bits to ensure a strong security of the communication channel