Brian Warner
Brian Warner
We had an idea today, along the lines of #32, but for GPG keys instead of SSH keys. In particular, at a conference, I was asked to sign someone else's...
I was chatting with @gtank and @str4d about alternate PAKE algorithms the other week (in particular SPAKE2-EE over Ristretto, basically the blinding factor is the Elligator2 string->point mapping of the...
We use `magic-wormhole` as the Python (PyPI) distribution name, as well as the GitHub repo name. It's also the name of the Debian package, and the Homebrew package. The executable...
When a nameplate is released and deleted, the server should avoid re-allocating it to someone else for maybe 10 minutes. This would add some weak protection against an MitM attack:...
The new Dilation functionality uses the Noise protocol, as provided by the [noiseprotocol](https://github.com/plizonczyk/noiseprotocol/) package. During the unit tests which exercise Dilation (or any actual usage), we get the following warning:...
Folks at PyCon are abuzz about a code-formatting tool named "Black", which sounds like it behaves a bit like `rustfmt`. I should look at the style it enforces and decide...
It'd be nice if the `wormhole receive` side could remind users that tab-completion is available. This might also help avoid the confusion that happens when the sender says (speaks) "the...
We came up with a neat feature idea at PyCon: using magic-wormhole to set up SSH pubkeys. The use case is that Alice owns a computer, and wants to give...
I think we could improve the behavior of the client when re-connecting to a nameplate that's expired because of a long period of disconnecting. I haven't confirmed exactly what happens...
As mentioned in #121, to protect 0.9.0 (and older) clients which cannot tolerate duplicate peer messages, the rendezvous server should filter these out. Basically it should ignore anything but a...