Re:Rpgp: Pure Rust implementation of OpenPGP
by 01HNNWZ0MV43FF on Tuesday April 09, 2024 @07:44AM
(#39978417)
"communicating with the same identity you initiated with."
Is that not tofu, which is easy in many crypto systems?
(But note: absent something like that, it in fact is possible for Signal to prove that you’re communicating with the same identity you initiated with. That’s the whole point of authenticated key agreement, which is not something that PGP can natively perform.)