Skip to content

Encryption #12

@S010MON

Description

@S010MON

We should add two way encryption using the following steps:

  1. Server provides a SERVER_PUBLIC_KEY through a /public_key route
  2. Client encrypts their CLIENT_PUBLIC_KEYusing the SERVER_PUBLIC_KEY and send it to the server.
  3. The server authenticates the client password.

Current State: Anyone knows the SERVER_PUBLIC_KEY but the CLIENT_PUBLIC_KEY is only known to the server

  1. The server provides a SECRET_PUBLIC_KEY to the client updating the SERVER_PUBLIC_KEY so that it is only known to the client (this could be different for every client so that each client can only decrypt messages to them.

Current State: The SERVER_PUBLIC_KEY and the CLIENT_PUBLIC_KEY is are only known to the client and server respectively

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions