i dont see how something like this could conceivably work for 2 parties that do not yet know each other. the problem of establishing identity/trust between stra

i dont see how something like this could conceivably work for 2 parties that do not yet know each other. the problem of establishing identity/trust between strangers can't be solved in any 100% manner over any medium that can be tampered with. if both of you rely on some intermediate authority for authentication (as HTTPS works), it's by definition not 100% because the intermediary can, in theory, be compromised. if the two parties know each other and can authenticate via some basic questions, that may work. or you can just exchange symmetric AES keys in person or public certs through another channel.