Re:Surespot app - free and open source encryption for everyone
by surespot on Monday September 02, 2013 @11:44AM
(#6315648)
The threat model also suggests that you verify key fingerprints manually if you are concerned about MITM.
[ Parent
| on HN ]
Re:Surespot app - free and open source encryption for everyone
by StavrosK on Monday September 02, 2013 @11:47AM
(#6315662)
Yeah, I guess verifying the full length of the fingerprint would mitigate that, and not doing that exposes you to a MITM attack anyway. Not much less secure than exchanging the keys directly, then, you are right.