|
|
|
|
|
by jeremyw
3475 days ago
|
|
In a weak sense. In Signal, every single volley (in the Diffie-Hellman ratchet, at least) is testing the validity of the parties and cycling the ephemerality. Thus the newer notion of "key continuity", that is anchored all the way back to the initial, authenticating handshake. TLS has only the lesser resumptive property that the server got back what it sent some time ago, so this is probably the same thing -- but one can imagine lots of opportunity to monkey. |
|