Friends list for "password-less" transfers
ZinoKader opened this issue · 0 comments
While the password is already pretty short, it requires communication of the password over some other medium for every individual transfer session to establish a connection. An optional feature could be to let users decide on an email/password combination which friends can add to their friends list. This way, when your friend starts a transfer session, you can simply choose their email/name from the CLI and start receiving.
An idea for how to still keep somewhat secure:
We would not want to store the credentials on the server (only in primary memory and hashed), just like with the password. To get around this, the transfer session would send the encrypted credentials to the server only when starting a transfer (and these are stored in memory until somebody connects). The recipient would then send the same encrypted credentials to the server, and if there is a match your friend is online and will start the transfer.