noosphere
noosphere copied to clipboard
When synchronizing with a gateway, caller should know when gateway ID changes
Currently, if the gateway's device key or sphere ID changes, we accept the change and proceed. This is potentially very dangerous, as an attacker-in-the-middle can potentially receive blocks during a sync that they otherwise wouldn't have access to.
We should implement a path where a gateway who reports new credentials interrupts the sync and gives us an opportunity to confirm the change with the caller.