Currently the user app generates an ECDH key that it uses to encrypt data sent to the provider with an appointment booking. Currently this key is static in the sense that it won't change even if the user cancels the appointment and books another one. To increase forward secrecy we should generate a new key when sending data to a different provider.
Currently the user app generates an ECDH key that it uses to encrypt data sent to the provider with an appointment booking. Currently this key is static in the sense that it won't change even if the user cancels the appointment and books another one. To increase forward secrecy we should generate a new key when sending data to a different provider.