E2E-Encryption
All confidential information of a message (e.g., message type, payload, etc.) should be E2E encrypted.
Current Idea
- Initially, all peers should send encrypted messages with a long-term key (the public key?).
- Session keys can be exchanged via the discovery and acknowledgment messages.
- After a time x, the communication should then encrypt messages mandatorily with session keys. Otherwise, further communication should be denied.
Open Issues
- Discovery and acknowledgment messages are currently only exchanged with the super-peer and directly connected peers. To rely on session keys for relay-based communication, we would need to introduce additional messages here.
Edited by bornholdt