[tor-bugs] #7522 [BridgeDB]: Design a user interface for redeeming invite tokens

[Tor Bug Tracker & Wiki]

#7522: Design a user interface for redeeming invite tokens
-------------------------+-------------------------------------------------
     Reporter:  aagbsn   |      Owner:  isis
         Type:  task     |     Status:  new
     Priority:  normal   |  Milestone:
    Component:           |    Version:
  BridgeDB               |   Keywords:  bridgedb-socdist, isisExB,
   Resolution:           |  isis2016Q1, bridgedb-ui, tbb-usability
Actual Points:           |  Parent ID:  #7520
       Points:           |
-------------------------+-------------------------------------------------

Comment (by yawning):

 Replying to [comment:4 isis]:
 > 1. How do we expect users to actually "invite" their friends? That is,
 if Alice invites Bob, how does the delegated credential get from Alice's
 computer to Bob's computer?
 >
 >    Is it reasonable to expect users to transfer a file this large or
 copy-paste it?  It contains private key material, so we cannot simply put
 it somewhere in some sort of "download link" (at least not without
 encrypting it and telling Alice to give Bob the key/passphrase).

 Bob generates a Curve25519 keypair and conveys it to Alice. Alice encrypts
 the invite with said keypair (NaCl's `crypto_box` suggests itself).  It
 sort of is a UI/UX disaster in that Bob needs to convey 32 bytes to Alice,
 but past that it allows the invite to be posted wherever, in a large
 number of formats (Under the assumption that if Curve25519 is broken, so
 is Tor in it's current state anyway).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7522#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online