A phone you pair can answer the cards that wait for you while you are away from the desk. It only decides: this computer still does what you chose, and the island keeps every card too. The Vults phone app is not out yet; until it is, the command-line test client in The phone’s relay pairs and answers like a phone.
Turning it on#
In Settings → Phone, turn on Answer cards from a phone, then pick an option in How the phone reaches this computer and fill in the field below it:
- Through a relay: a small server that keeps sealed messages until the other side reads them. Run your own (The phone’s relay) and give its address in Relay.
- Straight (LAN or tailnet): this computer runs the relay itself on the address you give in
Listen on, such as its tailnet address and a port (
100.64.0.2:8787). The phone must be able to reach it.
Every request to the relay is a request on your behalf: off until you turn it on, at most 10,000 a day, each kept in the local trace (Safety).
Pairing#
Press Pair: a QR shows for two minutes. Scan it with the phone. The QR holds this computer’s public key, the relay’s address and a one-time secret; only a phone that saw it can pair, and it pairs one phone. Below the QR, The code’s text, for the command-line test client gives the same code as text. The phone then shows under Paired phones.
Answering#
Each card waiting on the island goes to every paired phone, and leaves it when the card leaves the line. In the Paused preset no card exists, so nothing reaches the phone. On the phone:
- Deny and Dismiss (send it to the terminal) need no biometrics.
- Allow, Always and answering a question need your fingerprint or face, for that one answer.
An answer counts only if that phone’s key signed it for that exact card, in time, and it was never used before. A relay that drops, delays or replays messages can make a card wait, never answer it (What it sees). If this computer cannot save that an answer was used, the answer is dropped and the card keeps waiting. Always from the phone makes the same rule as on the island (Approving).
Revoking#
Revoke beside a phone and nothing it signs is taken from then on. A revoked phone stays in the list and cannot pair again under the same keys.