3 ms·
The same attack could be mounted against a Matrix server tbh. But the fact Matrix is E2EE by default would mitigate it a bit, and if folks verified who they wer
by Arathorn 3y ago
The same attack could be mounted against a Matrix server tbh. But the fact Matrix is E2EE by default would mitigate it a bit, and if folks verified who they were talking to then the attack would be defeated.
- huggingmouth 3y agoMatrix clients typically complain very loudly when keys change or unverified sessions get added to your chats. Id's say it would mitigate it A LOT. Though I have to agree that there is still a lot of room for improvement. I personally prefer the approach taken by briar: your public key is your address. Pretty cut and dry, not much room for shenanigans.