Hacker News new | ask | show | jobs
by jpgoldberg 3761 days ago
Are you suggesting simple DH without any long term secret?

Hmm. I'm fairly sure we thought through that option, but at moment I can't see see/recall why we rejected it.
1 comments
garrettr_ 3761 days ago
Well, unauthenticated DH ("simple DH without any long term secret") is trivially MITM-able, so it could only be useful if you adversary could read but not write to the channel, which I doubt is the case in this context.
link
jpgoldberg 3761 days ago
Right. This would be unauthenticated with all of the problems that that entails.
link