9 ms·
The author said exactly this, in the paragraph right before the one you quoted: > Some communication systems, like Signal, allow users to compare key fingerpri
by titanomachy 10y ago
The author said exactly this, in the paragraph right before the one you quoted:
> Some communication systems, like Signal, allow users to compare key fingerprints in order to verify that each received the right public key.
- cyphar 10y agoThat's not what I said. Signal stores the key that you've already verified. So changing the key in the keyserver doesn't do anything to a device, since you haven't verified the new key from the keyserver (and it shows a warning).
- Natanael_L 10y agoTOFU / POP Trust on first use / persistence of pseudonym
- cyphar 10y agoYes, that is the phrase I was looking for. :P
- sievebrain 10y agoYou think. Remember that you don't know what binary you were delivered, unless you personally reverse engineered it yourself.
- cyphar 10y agoOr compiled and side-loaded it yourself.