I think I figured out a way to do secure registration with a MITM without certificates, so there might be a way out from this mess. But still you need to trans

I think I figured out a way to do secure registration with a MITM without certificates, so there might be a way out from this mess. But still you need to transfer the client and check it's hash for it to work and that's hard to implement in practice. But you could bootstrap the thing over HTTPS (the download of the client) and then not need it ever again which is neat. Specially if you use TCP/HTTP now.