Google Ordered to Identify Who Watched Certain YouTube Videos

Re:Google Ordered to Identify Who Watched Certain YouTube Vi... by d-z-m on Sunday March 24, 2024 @03:37PM (#39809702)

That is true as far as it goes, but how does your node learn the public keys of the other nodes in your tailnet? My understanding is that they are provided by the coordination server, so you have to trust that the public key the coordination server gives you is actually the one for your peer device.

Tailnet lock helps mitigate this by requiring that node public keys are signed by a trusted signing node, but it isn't bulletproof.

[ Parent | on HN ]

Re:Google Ordered to Identify Who Watched Certain YouTube Vi... by Aerbil313 on Monday March 25, 2024 @12:41AM (#39812919)

Public key cryptography doesn’t work like that. If you were given wrong public keys you wouldn’t be able to connect to start with.

[ Parent | on HN ]

Re:Google Ordered to Identify Who Watched Certain YouTube Vi... by d-z-m on Monday March 25, 2024 @09:08AM (#39815818)

> Public key cryptography doesn’t work like that

Like what? I'm saying both sides of the connection would be given the wrong public keys by the coordination server. The private keys of which would be held by a MITM.

[ Parent | on HN ]