https://bugs.kde.org/show_bug.cgi?id=469874
Bug ID: 469874 Summary: Feature request: one-off sharing between unpaired devices Classification: Applications Product: kdeconnect Version: 23.04.1 Platform: Other OS: Linux Status: REPORTED Severity: normal Priority: NOR Component: common Assignee: albertv...@gmail.com Reporter: adam.m.fontenot+...@gmail.com CC: andrew.g.r.hol...@gmail.com Target Milestone: --- SUMMARY As I understand it, any duple of KDE Connect clients is currently in one of two states: 1. The devices are "paired", which means they trust each other, have a long term link, and generally provide each other with a wide variety of features (e.g. clipboard sharing, ping, etc) depending on what plugins each device has enabled. For this reason, pairing is intended to be used for devices owned by a single person. 2. The devices are "unpaired", which means they're not allowed to talk to each other in anyway. Messages other than pair requests are ignored. I propose another state, which you might call "open". When two devices are placed in this state (either globally or with respect to each other), they are allowed to send individualized requests using the "share and receive" capability. Just as pairing requests show a confirmation dialogue on both ends, these requests would have a confirmation dialogue for *every* request. So they would never be put in a paired / trusted state (which would allow them to share files in perpetuity), but could nevertheless share files and URLs on a one-off basis. SPECIFICS Because of the contexts in which this feature is likely to be used (untrusted devices talking over untrusted networks), I think it would make sense to display a verification key of some kind on each device (e.g. code words or an emoji sequence representing bytes) that allow the users to verify that they're talking to the correct device *before* accepting the connection. KDE Connect represents certificate hashes as a 256-bit hex strings, but for live verification a short verification string would be much more usable. See e.g. https://datatracker.ietf.org/doc/html/draft-ietf-dnssd-pairing-02 An additional feature (not part of this request) could allow *saving* a device without having it paired. This would use a long term keypair, meaning that one would not have to verify it each time (meaning that the confirmation dialogue would just contain "accept / reject transfer"), and changes in the key could be detected and reported. JUSTIFICATION User story: Jane lives in a house with two other people, Josh and Jill. All of them have at least one computer, and all have a cell phone. They share a WiFi network. All of their devices run KDE Connect. Frequently, they would like to share photos they've taken with each other, but presently they have to use a hodgepodge of protocols and tools to accomplish this, sometimes even resorting to email or sharing through the cloud. They'd rather just use KDE Connect, which is how they transfer photos between their personal devices. --------------------- KDE Connect is a remarkably full featured application. It already does far more than most applications that allow connecting two devices, but it's missing one of the most common and useful feature of these other programs: an equivalent to Apple's AirDrop, Google's Nearby Share, etc. Given that the protocol, applications, and approach to encryption get us 90% of the way to implementing such a feature, I think it would be great to see support for sharing device-to-device in KDE Connect. This feature would also likely drive adoption of KDE Connect, making it a useful outreach tool for KDE more generally. ADDITIONAL COMMENTS As this is a suggestion for a feature, I've ignored the issue template. -- You are receiving this mail because: You are watching all bug changes.