>You need an existing authenticated channel or be vulnerable to man in the middle attacks Isn't this theoretically unavoidable for all forms of encryption? You

>You need an existing authenticated channel or be vulnerable to man in the middle attacks Isn't this theoretically unavoidable for all forms of encryption? You need some way of distinguishing your intended communication partner, because the best that any protocol could do is establish a secure link with whoever is on the other end of the line.