Allow the keyboard to initialize without allowing additional bonding.

[DJGummikuh]

I'm trying to run a microcontroller bluetooth keyboard. As far as I can tell, as soon as I'm doing keyboard.begin anybody can attempt bonding to the device, as long as it's not connecting to an already bonded device.

Usability-wise, I would prefer to offer my users that they have to deliberately start pairing mode to prevent a race condition window where someone can bond to the device before the device that is already bonded to pick up the pairing.

Would it be possible to extend the library to allow for enabling or disabling bonding?

[HijelHub]

This seems do-able. I would have to look into it further, but at first glance I could add an optional new bonding mode gate and then only allow bonding for n seconds OR until a bond is made I suppose.

[drifter007]

I also think that is necessary

[DJGummikuh]

Given the recent portasplit hack, which also attacked the BLE connection with the device, this has realistic tangible security considerations. I really hope you find an elegant way for that. Unfortunately I know way too little about BLE to be of meaningful help, I looked into NimBLE and decided to run away screaming 😅