Closed jcnelson closed 10 years ago
For this milestone, we'll simply make the slice secret available to syndicate.py (via SSL). We don't want the user to be involved in the bootstrapping process, and we can compromise security in this way for the time being.
Once we have keypairs established between slices and OpenCloud, we'll have the Syndicate observer serve the secret encrypted with the slice's public key.
Fixed in a325c04bdbbd98fa70b67da33be61dcd8c31a058
Instead of using the master secret for all slices, cryptographically derive one for each slice. Make a tool to generate the derived key.