ericcornelissen / NervousFish

An app for your :iphone: to exchange public-keys in a secure manner.
GNU Lesser General Public License v3.0
2 stars 4 forks source link

Identity check with grid #107

Closed jverbraeken closed 7 years ago

jverbraeken commented 7 years ago

User story

As a user I want to be sure that I am connected to the intended person and not to some Man In The Middle, so that I can securely exchange public keys.

What

This issue demands that we create a method for pairing with Bluetooth that makes sure you are connected to a certain person. This makes the connection more secure and you can be sure that there is no Man In The Middle, who can't be trusted.

Why

This issue is needed for the project because it's really important to be able to verify that you're really paired with the correct person. Otherwise a MITM (see #80) could be possible.

How

This feature can be added by letting the user with whom the initiating is pairing click on specific positions on a grid. For example, if a house is drawn over the grid, the user should e.g. first tap on the window, then on the door and finally on the roof.

Definition of done

This task can be considered done when

Notes