Design secure information transfer among a user's devices

[s1fr0]

Problem

With the final goal to implement multi-devices communications, we need to design a mechanism to securely exchange (cryptographic) information between 2 or more devices possessed by a user.

Since devices are in direct control of the user, we can simplify the devices' key-exchange/authentication mechanism by using an out-of-band QR scan, similarly as currently done by the Status app when transferring sessions. However we possibly want to simplify Status app implemented protocol (e.g. use Noise handshakes rather than opening a TLS connection), while overcoming some of its limitations (e.g., execute transfers even if not connected on same local network).

Acceptance criteria

• Propose and agree on a design for secure information transfer among user's devices

[s1fr0]

Closed by updating https://rfc.vac.dev/spec/35/, publishing https://rfc.vac.dev/spec/43/ and waku-org/nwaku#1117