ericcornelissen / NervousFish

An app for your :iphone: to exchange public-keys in a secure manner.
GNU Lesser General Public License v3.0
2 stars 4 forks source link

Identity check with rhythm over Bluetooth #109

Closed jverbraeken closed 7 years ago

jverbraeken commented 7 years ago

User story

As a user I want to be sure that I am connected to the intended person and not to some Man In The Middle, so that I can securely exchange public keys.

What

This issue demands that we create a method for pairing with Bluetooth that makes sure you are connected to a certain person. This makes the connection more secure and you can be sure that there is no Man In The Middle, who can't be trusted.

Why

This issue is needed for the project because it's really important to be able to verify that you're really paired with the correct person.

How

This feature can be added by letting the users that want to pair, sync their rhythm of tapping on the screen. This can be done by using, for example, a tune that the user can make or by some help of the app. How this should work should be thought out.

Definition of ready

This features is not ready until the following issues are finished:

Notes