3 ms·
(Replying to your new message) Yes, it would be something you'd have to know to look for. The good thing is that under suitable conditions it would let you kno
by shasta 13y ago
(Replying to your new message)
Yes, it would be something you'd have to know to look for. The good thing is that under suitable conditions it would let you know that you weren't being MITMed.
A more practical system would probably be to just display a session ID in each chat window that is tied to the session key and is supposed to match between chat partners -- a fact that can be checked later in person. That would prevent MITM attacks from being commonplace without everyone knowing about it.
- StavrosK 13y agoThat's what every system currently does, you're supposed to verify the fingerprints before talking to the other person. Phone systems are easier because you can verify that they're who they say from their voice (when it's reading you the fingerprint).