3 ms·
You claim that MitM attacks are possible because keys can change without being notified. Can you provide more details on that? I’ve been using signal for years
by akvadrako 6y ago
You claim that MitM attacks are possible because keys can change without being notified.
Can you provide more details on that? I’ve been using signal for years and often get key change notices.
- nullc 6y agoYou only get a low visibility notice ( https://signal.org/blog/images/safety-numbers-advisory.png https://signal.org/blog/images/safety-numbers-advisory.png ) which the counterparty can immediately scroll off. And even there, if I send a message to you and on receipt the software finds that your key has changed, my client sends it again to the new key. Which means that even if I was savvy enough to catch the message, it's tool late and potentially a critical secret has already been disclosed to a MITM by the time I see it.