3 ms·
Is there any commercially viable messaging protocol that is 100% defensible against any and all attacks?
by coldcode 13y ago
Is there any commercially viable messaging protocol that is 100% defensible against any and all attacks?
- StavrosK 13y agoNo, nothing is defensible against all attacks. OTR, Silent Phone/Text, (I'm forgetting some here), GPG/PGP, they're all good enough if you verify the fingerprints.
- leeoniya 13y agoi dont see how something like this could conceivably work for 2 parties that do not yet know each other. the problem of establishing identity/trust between strangers can't be solved in any 100% manner over any medium that can be tampered with. if both of you rely on some intermediate authority for authentication (as HTTPS works), it's by definition not 100% because the intermediary can, in theory, be compromised. if the two parties know each other and can authenticate via some basic questions, that may work. or you can just exchange symmetric AES keys in person or public certs through another channel.
- eknkc 13y agoHow about physical trust creation protocol? Something like bumping phones to create key pairs and exchanging them via bluetooth. That might work fine in theory.