mwthink / droppoint Goto Github PK

Current process - PSK (Pre-shared key) is stored on both server and node. Node uses this key any time it calls home to report.php

If the PSK is changed, all node scripts need to be updated with the proper PSK for them to be able to continue reporting in. This could be an issue when dealing with many servers.

The solution - PSK is only used for the initial authentication. Alongside the status code 1 that report.php returns with an initial authentication, it can send a ID token to the node which stores it. The control center stores a salted hash of that ID token for future authentication.

With this method, the PSK could be easily changed without disturbing existing node's ability to authenticate with the server.