Womp womp. #meshcore #encryption is not great. On a positive note, I managed to notice this by reviewing the code myself before I searched for an issue!
@mauve I am not an #InfoSec person so I really appreciate you finding this issue and posting about it. I am new to MeshCore and liked that it’s “more secure” than Meshtastic (a good selling point) but to be honest have not seen anyone outside the lead dev audit this claim in any way until now.
And I’m a bit horrified by the defensive responses to the original issue. :( I thought this open source project was going to behave better than that.
@mauve @scott that's the plan 🤘