> how do you allow two mutually untrusted client devices to determine that they share a common secret, without disclosing the secret? Use a PAKE. Although I th

> how do you allow two mutually untrusted client devices to determine that they share a common secret, without disclosing the secret? Use a PAKE. Although I think they all require two-way communication. https://en.wikipedia.org/wiki/Password-authenticated_key_agreement https://en.wikipedia.org/wiki/Password-authenticated_key_agr...