3 ms·
You can't just use some kind of Diffie–Hellman key exchange to agree on a key, instead of the user copying the key?
by ihuman 11y ago
You can't just use some kind of Diffie–Hellman key exchange to agree on a key, instead of the user copying the key?
- roustem 11y agoHow would that work when both processes are running on the same Mac, under the same user account?
- jpgoldberg 11y agoAre you suggesting simple DH without any long term secret? Hmm. I'm fairly sure we thought through that option, but at moment I can't see see/recall why we rejected it.
- garrettr_ 11y agoWell, unauthenticated DH ("simple DH without any long term secret") is trivially MITM-able, so it could only be useful if you adversary could read but not write to the channel, which I doubt is the case in this context.
- jpgoldberg 11y agoRight. This would be unauthenticated with all of the problems that that entails.