Implement REQUIRE_AUTHENTICATED policy #154
Labels
architecture
importance medium
An issue that is medium level importance. It's good to have but not 100% necessary.
Milestone
This policy means that we will only activate any of the OTR behavior when the other party is likely to be authenticated. This means that before starting a DAKE, if we have at least one trusted fingerprint for the peer, we should go ahead with the DAKE. AFTER the DAKE, we should also ensure that the key used was one we have a trusted fingerprint for. Otherwise we should abort the DAKE.
This should be configurable through the UI as well.
The text was updated successfully, but these errors were encountered: