3 ms·
A nice idea. But isn't the path from you->notaries still vulnerable to man-in-the-middle attacks? You would have to use CA authentication to verify the "notarie
by codexon 17y ago
A nice idea. But isn't the path from you->notaries still vulnerable to man-in-the-middle attacks? You would have to use CA authentication to verify the "notaries" you are talking to aren't fake.
- tbrownaw 17y agoIt comes with a list of the notaries and their public keys. So, the only concern is if your initial download is MitM'ed. http://www.cs.cmu.edu/~perspectives/notary_list.txt http://www.cs.cmu.edu/~perspectives/notary_list.txt
- codexon 17y agoOr the attacker could just block those servers and then spoof that file with new URLs and public keys.