3 ms·
Encryption without signing is arguably more useful than not encrypting at all, although there's an argument that non-signed encryption gives a false sense of se
by spijdar 5y ago
Encryption without signing is arguably more useful than not encrypting at all, although there's an argument that non-signed encryption gives a false sense of security that encourages bad practice.
However,
> we need to encrypt the information to prevent casual snooping using tools such as Wireshark.
Given this goal, signing is necessary. If you're not signing the encryption, you can use a tool like Wireshark combined with Bettercap to man-in-the-middle the encrypted session, and there's no point.