Removed socket.io dependency and wrote custom websocket handler (this was required for future mobile implementation)
Changed static websocket client connection to instance-based to allow for multiple instances/connections
Hardened comms security:
API calls are AES encrypted using a HOTP one-time-pass derived from a shared secret (established upon linking an app using ECDH with randomised keypairs) and a random nonce unique to each request. Each request also sets the hash of the next request nonce to provide forward security.
Enabled SSL
Implemented app/domain storage on IndexedDB using Dexie
v0.5.0 CHANGE LOG
API calls are AES encrypted using a HOTP one-time-pass derived from a shared secret (established upon linking an app using ECDH with randomised keypairs) and a random nonce unique to each request. Each request also sets the hash of the next request nonce to provide forward security.