Thanks for the info! I've been reading up on Diffie-Hellman, wasn't sure if it was susceptible to MITM, but glad to know that it is. My goal is to enable a mos

Thanks for the info! I've been reading up on Diffie-Hellman, wasn't sure if it was susceptible to MITM, but glad to know that it is. My goal is to enable a mostly-automated way to have devices on a network discover and authenticate each other. As a thought experiment, I was trying to determine if two devices plugged into a malicious router could communicate securely, but everything I've found so far seems to indicate that it isn't possible without a shared secret. Do you know how web vendors do it? Does Chrome/Firefox/etc have any base keys stored to ensure you aren't working with a censored internet?