-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
We should add two way encryption using the following steps:
- Server provides a
SERVER_PUBLIC_KEYthrough a/public_keyroute - Client encrypts their
CLIENT_PUBLIC_KEYusing theSERVER_PUBLIC_KEYand send it to the server. - The server authenticates the client password.
Current State: Anyone knows the SERVER_PUBLIC_KEY but the CLIENT_PUBLIC_KEY is only known to the server
- The server provides a
SECRET_PUBLIC_KEYto the client updating theSERVER_PUBLIC_KEYso that it is only known to the client (this could be different for every client so that each client can only decrypt messages to them.
Current State: The SERVER_PUBLIC_KEY and the CLIENT_PUBLIC_KEY is are only known to the client and server respectively
Metadata
Metadata
Assignees
Labels
No labels