Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use public key crypto for authenticated message transport #89

Open
TKussel opened this issue Apr 14, 2021 · 1 comment
Open

Use public key crypto for authenticated message transport #89

TKussel opened this issue Apr 14, 2021 · 1 comment
Labels
enhancement New feature or request

Comments

@TKussel
Copy link
Collaborator

TKussel commented Apr 14, 2021

At the moment the message integrity is evaluated using an MAC scheme. We could switch to an asymmetric crypto based approach and have the sender sign the message. This would improve the security, as impersonations and MITM would become impossible (see issue #88), but it would also increase the complexity. We would need a mechanism to generate/import public/private keys as well as fingerprint validations of all other parties.
@prasser @fnwirth What do you think?

@fnwirth
Copy link
Member

fnwirth commented Apr 14, 2021

That would mean we need a new type of interface to exchange the public keys?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants