4 ms·
Are you suggesting simple DH without any long term secret? Hmm. I'm fairly sure we thought through that option, but at moment I can't see see/recall why we rej
by jpgoldberg 11y ago
Are you suggesting simple DH without any long term secret?
Hmm. I'm fairly sure we thought through that option, but at moment I can't see see/recall why we rejected it.
- garrettr_ 11y agoWell, unauthenticated DH ("simple DH without any long term secret") is trivially MITM-able, so it could only be useful if you adversary could read but not write to the channel, which I doubt is the case in this context.
- jpgoldberg 11y agoRight. This would be unauthenticated with all of the problems that that entails.