9 ms·
What is stopping me doing a MITM on that, especially when it's digital - couldn't I copy the locked package that Alice sent, forward the original to Bob, and th
by tommica 7y ago
What is stopping me doing a MITM on that, especially when it's digital - couldn't I copy the locked package that Alice sent, forward the original to Bob, and then when Bob sends his locked copy, I use my copy and attach my OWN lock to it, and send that instead to Alice, who then removes her lock from it, leaving only a package that is locked with my lock?
- Cogito 7y agoSure, you need a way to verify that the package has been locked by who you thought you were sending it to. Your attack would work by removing Bob completely, you just play his part in the protocol. This is true for any protocol though. If you don't know who you're talking to then you could be talking to anyone. In practice most protocols get around this by either pre-sharing a private key, or using a public/private key pair with a challenge round to establish identities.