4 ms·

What application would you say has "real" e2e encryption? Signal and all the other apps have exactly the same problem right? If you don't compare your keys offl

What application would you say has "real" e2e encryption? Signal and all the other apps have exactly the same problem right? If you don't compare your keys offline, you're always at risk for this attack. You can't build cryptography out of sand.

rhizome 8y ago
At the very least, Signal notifies on rekeying and in both the desktop and Android versions it doesn't appear to be changeable.
- indigo945 8y ago
  WhatsApp also notifies on rekeying. A yellow message is shown warning that "your conversation partner's security codes have changed" or something of the sort.
  - kikoreis 8y ago
    It's an option. And it's disabled by default.
mach5 8y ago
keybase does! https://keybase.io/ https://keybase.io/
- indigo945 8y ago
  How does keybase do key exchanges?
- lucb1e 8y ago
  You're saying at Keybase you don't have to compare your fingerprints out of band?
  - 0xb100db1ade 8y ago
    Correct. Key verification is done by looking at signatures on a given user's linked social networks / websites etc
    - tyfon 8y ago
      How does it handle DNS spoofing or ip redirection? And what happens if you have no social networks / websites like me? HN is probably the closest I got to a social network online.
AnaniasAnanas 8y ago
Software that uses the user's public key as the user's identifier (or potentially something that uses namecoin) do not have this issue - consider tox and ricochet for example.
- ATsch 8y ago
  This isn't really a solution, though. It's just moving the problem somewhere else. The problem then becomes things such as linking existing Third Party Identifiers like email, phone numbers etc. to the users key (which most regular users want to be able to do). The idea of a user per key in general also becomes problematic with multi-device usage or a device compromise. You will not be able to revoke access to any device without throwing away your whole identity.

rhizome 8y ago

At the very least, Signal notifies on rekeying and in both the desktop and Android versions it doesn't appear to be changeable.

indigo945 8y ago
WhatsApp also notifies on rekeying. A yellow message is shown warning that "your conversation partner's security codes have changed" or something of the sort.
- kikoreis 8y ago
  It's an option. And it's disabled by default.

mach5 8y ago

keybase does! https://keybase.io/ https://keybase.io/

indigo945 8y ago
How does keybase do key exchanges?
lucb1e 8y ago
You're saying at Keybase you don't have to compare your fingerprints out of band?
- 0xb100db1ade 8y ago
  Correct. Key verification is done by looking at signatures on a given user's linked social networks / websites etc
  - tyfon 8y ago
    How does it handle DNS spoofing or ip redirection? And what happens if you have no social networks / websites like me? HN is probably the closest I got to a social network online.

AnaniasAnanas 8y ago

Software that uses the user's public key as the user's identifier (or potentially something that uses namecoin) do not have this issue - consider tox and ricochet for example.

ATsch 8y ago
This isn't really a solution, though. It's just moving the problem somewhere else. The problem then becomes things such as linking existing Third Party Identifiers like email, phone numbers etc. to the users key (which most regular users want to be able to do). The idea of a user per key in general also becomes problematic with multi-device usage or a device compromise. You will not be able to revoke access to any device without throwing away your whole identity.