Tag Info

Hot answers tagged


I'm trying to get my head around how the crypto solves this problem. It doesn't. You need to trust the platform you use to do the signing. For instance, my bank has replaced the "signature" generation device that I previously used with one that displays the actual transaction, so I don't have to trust the information on the computer screen that much.


No you can't prove that C sent something. The only thing you can reliably prove to somebody is that somebody at some point had a HTTPS connection to C, by presenting the key exchange. You can't prove that C send something because the record layer is symmetrically, meaning everything C sent, could be forged by B as he has to have the neccessary keys. To ...


First, there is no way that crypto can keep an attacker from manipulating the data that is shown to the user. to prevent this, you have to trust some part of your hardware, at least the screen that views the data and some chip inside that can do some crypto. Moreover, digital signatures alone will not solve this problem as the merely capture signing a ...

Only top voted, non community-wiki answers of a minimum length are eligible