9 lines
479 B
Markdown
9 lines
479 B
Markdown
# Pinned-key mismatch forces a full re-pair
|
|
|
|
If a peer reconnects with a static key different from the pinned one, the
|
|
session is rejected and the peer is treated as unpaired; a fresh handshake plus
|
|
SAS verification is required before the pinned key is updated. Silently
|
|
accepting a changed key would void the entire purpose of SAS verification (a
|
|
LAN MITM who knows the peer's device ID could swap the key). Reinstalling an
|
|
app therefore means a new identity and a new pairing.
|