News for hackers. Stuff that matters.

A comment on The Emails Snowden Sent to First Introduce His NSA Leaks.

Re:The Emails Snowden Sent to First Introduce His NSA Leaks by joelanders on Monday October 13, 2014 @12:17PM (#8449305)
I wonder how they "confirm[ed] out of email that the keys we exchanged were not intercepted and replaced by your surveillants." Key exchange is the hardest part.
[ Parent | on HN ]
Re:The Emails Snowden Sent to First Introduce His NSA Leaks by theintern on Monday October 13, 2014 @04:21PM (#8450425)
That was my thought as well. Given all communication is considered compromised, I can't think of a simple way to do this that isn't a face to face.
[ Parent | on HN ]
Re:The Emails Snowden Sent to First Introduce His NSA Leaks by DINKDINK on Monday October 13, 2014 @07:34PM (#8451219)
Could you explain how exchanging PGP keys over TLS would be compromised or compromisable?
[ Parent | on HN ]
Re:The Emails Snowden Sent to First Introduce His NSA Leaks by belovedeagle on Monday October 13, 2014 @10:26PM (#8451655)
Simple. Analog man-in-the-middle; i.e., you're not talking to who you think you're talking to. That's the whole point of key exchange.
[ Parent | on HN ]
Re:The Emails Snowden Sent to First Introduce His NSA Leaks by pointernil on Monday October 13, 2014 @03:27PM (#8450129)
Who doesn't ;) Any speculations? Ideas? Agreeing on an entropy source is one thing, but really exchanging keys out of NSAs sight is hard, right?
[ Parent | on HN ]