2026-10-04 11:04:25 +02:00
1 changed files with 4 additions and 2 deletions
@@ -538,8 +538,10 @@ Tickets DC-046 through DC-049 implement pluggable auth + email magic link. Sami
 ### DC-150: WireGuard invites (QR) + client config
 - **status:** todo
 - **details:** one-time token (7d TTL, single-use) → redemption page. Client
-  keypair generated IN THE BROWSER (WebCrypto X25519, ECDSA-P256 fallback);
-  server receives the public key only, registers the peer /32, returns config
+  keypair generated IN THE BROWSER via WebCrypto X25519 ONLY — NO fallback
+  algorithm; browsers lacking X25519 get an explicit unsupported-browser
+  failure. Server receives the public key only, registers the peer /32,
+  returns config
  (Address, DNS=10.53.0.1, hub PublicKey, AllowedIPs=10.53.0.0/16 — a CIDR,
  never a DNS zone). Config + QR rendered client-side; private key never
  transits or rests on the server. Tests: token lifecycle, single-use