Tag Info

New answers tagged

3

For that first use you're doing unauthenticated DH. And this is only safe against passive eavesdroppers. It is NOT safe against an active Man-in-the-Middle (MITM). So if you were MITM'd during that first exchange, then all bets are off. If that time-window of exploitation is small enough for your purposes, you may still want to use it. (So what you're ...


0

No actual security system works like you describe, for exactly this reason. The certificate is not used to encrypt the shared secret to verify that they have the same secret; that would be pointless (you might as well just have one side generate the secret and send it encrypted with the other side's public key). When the shared secret is generated using data ...


1

Alice sends hello to Bob which contains a code A. Eve intercepts the message and instead puts a code E. The above just won't happen. before Alice sends anything, Alice requests the CA to verify bob.com(Eve), the response from CA won't match Eve, so Alice will receive a warning saying that Bob's certificate is invalid. If somehow Alice has Eve's ...



Top 50 recent answers are included