End to end encryption 🔏

[MusicFreak456]

The plan is to do it like that:

• Every user will generate an asymmetric RSA key pair and share public key with every other user in the board.
• Board host will also generate a symmetric AES private key.
• Board host will use RSA encryption to send AES private key to every user in the board individually.
• AES key will then be used to encrypt and decrypt traffic between users of the board.

Why is RSA needed? - We need to share AES key without server ever seeing it.
Why not use RSA directly? - We would then need to share updates to every board user individually which would multiply the traffic between users.

[MusicFreak456]

This can end up being a very non-trivial task, as there are a lot of culprits to storing and distributing the keys...