Skip to content

Conversation

@recrof
Copy link
Collaborator

@recrof recrof commented Nov 3, 2025

Remote-setting private key is crucial when operator needs to change public key of the node because of ID collision.
In case of repeater breach: setting different private key by the attacker has low gain - owner will be notified that the public key was changed as soon as repeater adverts again.

@ripplebiz
Copy link
Collaborator

I just realised that changing the private key (ie. self_id) invalidates the ACL. For performance reasons, I decided to persist the shared_secret for each entry in the ACL.
The MyMesh::saveIdentity() method should call a (not yet written) acl.erase() method, to blow away the file.

@recrof
Copy link
Collaborator Author

recrof commented Nov 6, 2025

@ripplebiz does that mean you'll first implement the required changes before this PR can be merged?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants