How you be sure that the man who you're talking with is the one who you think he is? I.e. how to perform authentication in P2P network without central trust server or Certificate Authority?
I'm just wondering how can someone make distributed (peer-to-peer) overlay network or chat using DHT for finding peers (like BitTorrent Chat have done).
BitTorrent chat uses DHT to find some information about peers and then to connect to them directly. I think it uses assymetric cryptography, as well. But this doesn't solve the problem of somebody trying to perform a MiTM attack by putting a lot of incorrect data about peers into the DHT (i.e. incorrect peer IP addresses or public keys).