Timeline for Triple Diffie-Hellman and MITM
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 17, 2020 at 8:17 | history | edited | CommunityBot |
Commonmark migration
|
|
| Jan 31, 2020 at 11:55 | comment | added | Maarten Bodewes♦ | Well, yes, they probably can, but if the keys are trusted by establishing a contact, then the action may have to be taken pre-emptively. With WhatsApp though, you have to trust the app as well (and the Google app store). I don't know if there are any other actions that WhatsApp can take to authenticate the keys, but it would be hard to do that automatically. There is a certain interaction between phone / phone number though, so I'm not 100% on that. | |
| Jan 31, 2020 at 7:00 | comment | added | Rahul | Let me continue WhatsApp/Signal example, Alice and Bob has no other signalling channel than the WhatsApp server, so there is no easy way to authenticate - at least for a normal user. Moreover, it looks like, say WhatsApp can monitor all the communication by sending spoofed key sets to Alice and Bob and both the parties are thinking that no one can watch their communication since it is E2E encrypted. Correct me if I am wrong. | |
| Jan 31, 2020 at 4:03 | history | edited | Maarten Bodewes♦ | CC BY-SA 4.0 |
added 1 character in body
|
| Jan 31, 2020 at 3:53 | history | answered | Maarten Bodewes♦ | CC BY-SA 4.0 |