Description

TO DO for PKI

This is the bare minimum work needed for PKI
See: meshtastic/Meshtastic-Apple#869

Security Configuration

• Create new "Security" tab under "Config" - @KomelT
• Add PKI key input - @KomelT
• PKI key validation
• Load Security settings from device
• Save Security settings to device
• BONUS: Add PKI key generator (see PSK Generator #266)
  • Confirmation dialog when generating new Private Keys
• Ability to show/hide PKI keys with "eye" icon - @KomelT
• Move "Serial Output Enabled" toggle from Device tab to new Security tab
• Move "Enabled Debug Log" toggle from Device tab to new Security tab
• Add "Allow Bluetooth logging" toggle
• Add "Allow Legacy Admin" toggle (don't use PKI)
• Add "Admin key" input for managed nodes (use PKI)
  • Disable "Admin key" input when "Allow Legacy Admin" is toggled on
• Move "Managed" toggle from Device to new Security tab
  • Require either "Allow Legacy Admin" or "Admin key" when enabling "Managed" toggle

Nodes List

• Display green lock for nodes with a public key
• Display red lock with slash for nodes with public keys that do not match their recent messages (How do we track this persistently?)
• Display yellow open lock for existing DM messages sent before PKI
• Allow user to forget node, allowing it to rejoin with new key (is this the same as deleting a node?)

Messages

• Display a Green Lock when a DM is using PKI
• Display a Yellow Open Lock when a DM is not using PKI
• Display a lock when message sent with PKI
• Display a lock on the message when message received with PKI
• Display message when others in conversation change their key
• Display an error when a message is sent with the incorrect public key