As a user I want to be sure that I am connected to the intended person and not to some Man In The Middle, so that I can securely exchange public keys.
What
This issue demands that we create a method for pairing with Bluetooth that makes sure you are connected to a certain person. This makes the connection more secure and you can be sure that there is no Man In The Middle, who can't be trusted.
Why
This issue is needed for the project because it's really important to have the most secure app possible for our target audience.
How
This feature can be added by creating an extra layer above Bluetooth with for example a picture with a grid and that someone needs to click on specific grids. Another way is to have some type of rhythm, which both users have to tap on their screen.
Definition of done
This task can be considered done when
[ ] There is an Android activity which can be used to show the extra identity check.
[ ] The two devices can communicate and tell each other the specifications of identity check.
[ ] The identify is check is verified by the initiating device.
[ ] The keys are exchanged after the verification was successful.
Parent issues: #2
Relevant issues: -
Estimated effort: 20
User story
As a user I want to be sure that I am connected to the intended person and not to some Man In The Middle, so that I can securely exchange public keys.
What
This issue demands that we create a method for pairing with Bluetooth that makes sure you are connected to a certain person. This makes the connection more secure and you can be sure that there is no Man In The Middle, who can't be trusted.
Why
This issue is needed for the project because it's really important to have the most secure app possible for our target audience.
How
This feature can be added by creating an extra layer above Bluetooth with for example a picture with a grid and that someone needs to click on specific grids. Another way is to have some type of rhythm, which both users have to tap on their screen.
Definition of done
This task can be considered done when
Notes
-