diff options
Diffstat (limited to 'TODO')
| -rw-r--r-- | TODO | 7 |
1 files changed, 3 insertions, 4 deletions
@@ -6,13 +6,12 @@ matter.) * loadLog should verify the hashes (and signatures) in the log, and refuse to use logs that are not valid proofs of a session. -* Encryption! -* Add random nonce to start message, to avoid replay issues. - (Or perhaps the encryption derives a RSA key in a way that avoids - replay..) * Network! * Server! * gpg key downloading, web of trust checking, prompting Alternatively, let debug-me be started with a gpg key, this way a project's website can instruct their users to "run debug-me --trust-gpg-key=whatever" +* Multiple developers should be able to connect to a single debug-me + user. Most of the code was written with that in mind, but not tested + yet.. |