Diffie-Hellman for the layman

Re:Diffie-Hellman for the layman by avmich on Friday April 30, 2021 @10:48PM (#27002515)

So this doesn't unfortunately work with a man in the middle?

That is, how email exchange can be guaranteed to work properly, and MITM won't insert his email in the middle of the process?

[ Parent | on HN ]

Re:Diffie-Hellman for the layman by spekcular on Friday April 30, 2021 @11:14PM (#27002697)

Yes, exactly. This is why real-world systems additionally include some kind of authentication protocol.

Reference: https://en.wikipedia.org/wiki/Man-in-the-middle_attack#Authe...

[ Parent | on HN ]

Re:Diffie-Hellman for the layman by boris1 on Sunday May 02, 2021 @02:23AM (#27012775)

The check digits solve the MITM problem. You should compare them by another channel than email, such as text message. This is called "Short Authentication String" (SAS).

[ Parent | on HN ]