Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Wikipedia article on Man-in-the-middle attack mentions, in the list of defenses against it, some method called "Carry-forward verification", but it does not explain it. I am curious about different MITM defense methods in general. Can someone describe this method or point to description? (Of course googling does not give anything except wikipedia itself with its clones.)

ps. Would be grateful also if someone points me to more elaborated survey of MITM defense methods (and especially for key exchange).

share|improve this question
2… – Ricky Demer Dec 27 '13 at 0:29
Since you're interested in MITM in general this should be useful – rath Dec 28 '13 at 6:15

That was a bad edit to Wikipedia. The phrase "Carry-forward verification" is not a standard, well-known term in the cryptographic literature. It should not have been included in Wikipedia without a reference to something more specific. But oh well, no one is perfect, sometimes these things happen.

Your request for an elaborate survey of MITM defence is most likely too broad for this site; the kind of defences that are suitable are dependent upon the specific application domain. You can read up about certificate authorities, web of trust, x509, certificate pinning, trust-on-first-use (aka key continuity), and many other models. There's lots written on this topic.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.