Security: Device Approval Flow

[sanchxt]

Description

Sender explicitly approves receiver before transfer begins.

Requirements

• CLI flag: yoop share file.txt --approve
• Config: Trust level "ask_each_time" enforces approval
• Approval prompt: device name, IP, public key fingerprint
• Options: Accept, Decline, Trust (accept + add to trusted)
• Timeout: Auto-decline after 60 seconds
• Multiple receivers: Approve each individually

CLI Flow Example

$ yoop share secret.txt --approve
  Code: A7K9
  Waiting for receiver...
  
  Incoming connection from:
    Device: Bob-Laptop
    IP: 192.168.1.105
    Key: ed25519:a3f7...9b2c
  
  Approve this transfer? [y/N/t(rust)]

Technical Details

• Pause transfer after code verification, before file list
• New protocol message: TransferApproval (0x80)
• Store approval decisions in session state