@alex02@cyberplace.social this looks to me to be a time to design a 2.0 MT protocol. They need to tie the mac address to the public/private key pair. They also need to actually sign things. They need to at least sign the node advertisements that contain the full public key. Lastly the app needs WAAY better UX that's very similar to SSL UX flow. Give users the info to verify or trust a new key. They should never automagically replace keys like this.