noosphere icon indicating copy to clipboard operation
noosphere copied to clipboard

When synchronizing with a gateway, caller should know when gateway ID changes

Open cdata opened this issue 2 years ago • 0 comments

Currently, if the gateway's device key or sphere ID changes, we accept the change and proceed. This is potentially very dangerous, as an attacker-in-the-middle can potentially receive blocks during a sync that they otherwise wouldn't have access to.

We should implement a path where a gateway who reports new credentials interrupts the sync and gives us an opportunity to confirm the change with the caller.

cdata avatar Aug 03 '23 22:08 cdata