Timeline for A tale of two sources: Is TLS *defense* against Man-in-the-Middle, or not?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 19, 2017 at 17:53 | comment | added | Ajedi32 | @DaveSwersky It depends on what your threat model is, and how TLS is being used. For example, in the "Calls that involve three or more parties" example in the answer above, you definitely would not want to use just TLS if you don't trust the application server. | |
| Jan 19, 2017 at 17:50 | history | edited | John Wu | CC BY-SA 3.0 |
added 354 characters in body
|
| Jan 19, 2017 at 17:49 | comment | added | Dave Swersky | Thanks for the clarification- the way I read this is that "both TLS and message would be best, but TLS by itself would be 'good enough' to address MITM." Do I understand correctly? | |
| Jan 19, 2017 at 17:47 | history | answered | John Wu | CC BY-SA 3.0 |