Implement TOFU for chat initializations #8

New Issue

silentsilas · 2024-02-01T18:38:53Z

silentsilas commented

2024-02-01 18:38:53 +00:00

When a message is received, the receiving client checks the sender's public key. If it's the first message from that sender, the client stores the public key and associates it with the sender's name (this is the "trust on first use" part).
For subsequent messages, the client checks the sender's public key against the stored key for that name. If the keys match, the message is accepted. If they don't match, the client displays a warning to the user.
They can either accept the new public key, or abort the attempt to connect

* When a message is received, the receiving client checks the sender's public key. If it's the first message from that sender, the client stores the public key and associates it with the sender's name (this is the "trust on first use" part). * For subsequent messages, the client checks the sender's public key against the stored key for that name. If the keys match, the message is accepted. If they don't match, the client displays a warning to the user. * They can either accept the new public key, or abort the attempt to connect

silentsilas added the

enhancement

label 2024-02-01 18:39:11 +00:00

silentsilas added this to the MVP project 2024-02-01 18:39:14 +00:00

Sign in to join this conversation.