3 ms·

> What we did not know was how to authenticate a site's public key. Naive question-- why not "trust on first use?"

• cm2187 9y ago
  But then you can't replace the key before it expired (how can you tell that the key has changed or that you are being mitm?).
  • jancsika 9y ago
    Can't I just send a signed message to revoke my key? Seems like that would cover cases except the one where a node cannot recover its own key.
    • Jtsummers 9y ago
      If you're trusting on first use, and have been man-in-the-middled, then the true source won't have the original key to revoke the false key with.
• nickodell 9y ago
  You're not talking to other sites directly. Alice can tell you, "Here's a message from Bob. His public key is 0x1234," when Bob's public key is actually 0x5678. This opens a new avenue for trolling: publish a fake key for someone else and watch all their messages get dropped.