0.4.0next · in development
newHosted pairing:
mtmux opens a sealed tunnel and prints a QR and a pairing code, so a phone anywhere can attach without port forwarding.newThe pairing handshake is a CPace PAKE over ristretto255. The broker routes on two digits and never receives the other four.
newSealed transport: HKDF-SHA256 key schedule, AES-256-GCM frames, per-direction nonces and a counter that rejects replays.
newDevice keys. A paired browser reconnects with a signed challenge, so the code is needed exactly once and
mtmux devices can revoke it.newOptional accounts via OAuth device authorization —
mtmux login, whoami, servers — plus multi-server and the Pro plan.new
mtmux doctor, status and stop, and --local for a run that contacts no broker at all.