top | item 46845597

(no title)

NoahZuniga | 28 days ago

Well, surely your client knows what its own key is, and would notice that the listed key is wrong when it checks it.

discuss

order

morshu9001|28 days ago

They can also tell your client it has the correct key. Yours and the other clients are all talking to their mitm in this scenario. There's fundamentally no way to solve this without users verifying keys out-of-band.

NoahZuniga|28 days ago

> They can also tell your client it has the correct key.

No they can't. Key transparency cryptographically makes sure everyone gets the same result.