3 ms·
> you'd still be protected by PGP. You wouldn't, PGP is verified by code that can be MITM'd if the traffic is spoofed.
by pzduniak 9y ago
> you'd still be protected by PGP.
You wouldn't, PGP is verified by code that can be MITM'd if the traffic is spoofed.
- rocqua 9y agoAh yes, you are right. That darn server-provided client-side code without any decent means of verification really wrecks a lot of security guarantees.