(Feature request] Bluetooth guest access to node

[zl3ag]

We have a node at our local ham club for people to use.

It would be nice if a guest access mode was available via BT so they can connect via phone app but not fiddle with the node's config. Or maybe password access to the config area?

[b8b8]

Use 123456 as the Bluetooth password and post a copy nearby. Turn on "managed" mode so changes to the device can only be made over the admin channel.

[mtsdawson]

Just to better understand this, am I correct that with managed mode enabled, the node would still reveal the admin public key to the user? So, hypothetically, the guest user could copy the admin public key, then connect to the node via admin channel when managed mode is enabled?

Or is radio config completely disabled with managed mode enabled?

[b8b8]

That's not how public/private encryption works. Copying the admin public key wouldn't help as that is used for decrypting the admin message, not encrypting it. The guest user would need to copy the admin private key that then is decrypted by the public key and allows the admin message to be understood. There is no danger in sharing public keys, they just allow the other person to decode messages encrypted using the private key.

But to answer your last question:
Yes the radio config is completely disabled, you cannot click on it to even see the sub-list, let alone the actual settings. The Channel page with the QR code is also grayed out and cannot be changed (though the QR code is still visible).
I just confirmed this with Android.

[mtsdawson]

Super helpful, thank you. I was aware public is generated by private but just wanted to confirm this didn't have any glaring weaknesses before applying.

…

________________________________ From: b8b8 ***@***.***> Sent: Saturday, October 19, 2024 11:42:49 AM To: meshtastic/firmware ***@***.***> Cc: skelzer ***@***.***>; Comment ***@***.***> Subject: Re: [meshtastic/firmware] (Feature request] Bluetooth guest access to node (Discussion #5071) That's not how public/private encryption works. Copying the admin public key wouldn't help as that is used for decrypting the admin message, not encrypting it. The guest user would need to copy the admin private key that then is decrypted by the public key and allows the admin message to be understood. There is no danger in sharing public keys, they just allow the other person to decode messages encrypted using the private key. But to answer your last question: Yes the radio config is completely disabled, you cannot click on it to even see the sub-list, let alone the actual settings. The Channel page with the QR code is also grayed out and cannot be changed (though the QR code is still visible). I just confirmed this with Android. — Reply to this email directly, view it on GitHub<#5071 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ADBWV7KRASHLBLXBGAXKWDLZ4J4XTAVCNFSM6AAAAABP6IOT6GVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTAOJZGE4DQMY>. You are receiving this because you commented.Message ID: ***@***.***>