4 ms·
> but you have to trust the rendezvous server. Do you? It seems that magic-wormhole does end-to-end encryption, and the rendezvous server acts only as a relay
by wereHamster 9y ago
> but you have to trust the rendezvous server.
Do you? It seems that magic-wormhole does end-to-end encryption, and the rendezvous server acts only as a relay if one or both parties are behind NAT. So yes, you leak the two parties' IP addresses, but not the files you transfer.
- foota 9y agoYou have no way to verify that the rendezvous server you're connecting to isn't playing the role of the client or server.
- edraferi 9y agoThat doesn't make sense. The client needs the passcode to read the file, and that passcode is sent out of band. The Relay server can't simply "play the role of the client" and steal the file.
- foota 9y agoOf course, you're right. I was thinking the rendezvous server generated the key. Thanks for the correction.