3 ms·
There are some links in the article. Granted you could've easily missed them since the color is some washed out grey. Moxie should consider making the links a m
by higherpurpose 13y ago
There are some links in the article. Granted you could've easily missed them since the color is some washed out grey. Moxie should consider making the links a more visible color.
- acqq 13y agoThanks. Now I tried to follow the links and I still don't understand how they managed to achieve that "The new TextSecure protocol doesn't require a round trip key exchange process." I'd still like to know how actually their solution protects from MITM.
- jlund 13y agoYou can read about the key exchange here. "Prekeys" are an extremely clever idea: https://whispersystems.org/blog/asynchronous-security/ https://whispersystems.org/blog/asynchronous-security/ Fingerprint verification protects against MITM attacks. The application provides a nice interface where two users can scan a QR code to easily compare fingerprints. A hexadecimal fingerprint is also readily accessible.
- acqq 13y agoIt looks that the prekeys are stored on a server. How is the existence of the prekeys on the server (which can be compromised) not an issue?
- robryk 13y agoPrekeys are prerecorded responses to connection initiation: in the alternative world with no prekeys this is what you'd get when you've opened a connection.