documentation

2026-08-27 18:43:51 +02:00
parent 0426b6eeec
commit 5372fe26e8
7 changed files with 135 additions and 0 deletions
@@ -0,0 +1,8 @@
+# Pinned-key mismatch forces a full re-pair
+
+If a peer reconnects with a static key different from the pinned one, the
+session is rejected and the peer is treated as unpaired; a fresh handshake plus
+SAS verification is required before the pinned key is updated. Silently
+accepting a changed key would void the entire purpose of SAS verification (a
+LAN MITM who knows the peer's device ID could swap the key). Reinstalling an
+app therefore means a new identity and a new pairing.