vacp2p / research

Thinking in code
MIT License
62 stars 4 forks source link

Design secure information transfer among a user's devices #130

Closed s1fr0 closed 1 year ago

s1fr0 commented 1 year ago

Problem

With the final goal to implement multi-devices communications, we need to design a mechanism to securely exchange (cryptographic) information between 2 or more devices possessed by a user.

Since devices are in direct control of the user, we can simplify the devices' key-exchange/authentication mechanism by using an out-of-band QR scan, similarly as currently done by the Status app when transferring sessions. However we possibly want to simplify Status app implemented protocol (e.g. use Noise handshakes rather than opening a TLS connection), while overcoming some of its limitations (e.g., execute transfers even if not connected on same local network).

Acceptance criteria

s1fr0 commented 1 year ago

Closed by updating https://rfc.vac.dev/spec/35/, publishing https://rfc.vac.dev/spec/43/ and https://github.com/status-im/nwaku/pull/1117