For this to work in a secure way, these 2 need implementing:
HTTPS CA root cert bundle, #96
Encryption of NVS (for WiGLE API key), #95
This feature should be automatically disabled if NVS is not encrypted to prevent a key from being stored insecurely. Maybe this check can be disabled in the advanced config.
Once the conditions are met, the code to upload directly should not be difficult.
Also consider encryption between the client device and Wardriver for the web interface to protect the key at that stage, too.
JosephHewitt
commented
1 year ago
For this to work in a secure way, these 2 need implementing:
This feature should be automatically disabled if NVS is not encrypted to prevent a key from being stored insecurely. Maybe this check can be disabled in the advanced config.
Once the conditions are met, the code to upload directly should not be difficult.
Also consider encryption between the client device and Wardriver for the web interface to protect the key at that stage, too.