diff options
Diffstat (limited to 'CLAUDE.md')
| -rw-r--r-- | CLAUDE.md | 8 |
1 files changed, 4 insertions, 4 deletions
@@ -104,7 +104,7 @@ Scope: `hub`, `node`, `common`, or omitted for cross-cutting - **Never log GEK, private keys, or plaintext passwords** — even at DEBUG level - **meshbay.org is internet-facing** — open port → test → close port + kill processes in same block -## First security review (2026-08-10) — see `first-review.md` +## First security review (2026-08-10) — see `docs/first-review.md` **Critical (before Phase 7):** - **C1** Chat: Sender Keys protocol, NOT shared Double Ratchet (pairwise protocol @@ -167,9 +167,9 @@ Scope: `hub`, `node`, `common`, or omitted for cross-cutting **Architecture validated:** crypto primitives, GEK wrapping (ECIES), trust model, key hierarchy, on-the-fly encryption, transport abstraction, DTLS channel binding. -## Second security review (2026-08-13) — see `second-review.md` +## Second security review (2026-08-13) — see `docs/second-review.md` -**6 critical, 7 high findings. Phase 11.5 is BLOCKING — see `devel-phases-next.md`.** +**6 critical, 7 high findings. Phase 11.5 is BLOCKING — see `docs/devel-phases-next.md`.** The current build must not host real private data. The claims above about node sovereignty and P2P crypto material were **overstated**. The @@ -644,7 +644,7 @@ anything that assumes one key per person. both advance it, producing key/nonce reuse: that is C1 again, one level down. `GroupSenderKeyStore.add_sender` currently does `self._states[dist.sender_id] = ...`, so a second device under the same `sender_id` silently overwrites the first. Revoking a - device must rotate, like revoking a member. See `devel-phases-next.md` §15.0b + device must rotate, like revoking a member. See `docs/devel-phases-next.md` §15.0b - Chat is plaintext on the wire and at rest; the index is plaintext on the WebRTC path ## Known calibration TODOs |