Keeping track of your secrets is as essential a part of a crypto implementation as the algorithm used. As I understand it, they could have used something like this: https://secure.wikimedia.org/wikipedia/en/wiki/Socialist_mil...

EDIT: I understand now, having read more carefully, about how this particular MITM attack works. Nasty. The only solution would seem to be to give up some convenience.