[messaging] MITM-safe communication w/o authentication possible?
U.Mutlu
for-gmane at mutluit.com
Sun Nov 29 12:32:23 PST 2015
Hi all,
SRP and OTR+SMP are IMO good examples for MITM-safe online protocols.
But they require prior key exchange (ie. a persistent password or PKI
certificates).
I wonder if it can be possible, at least theoretically, to have a
MITM-secure internet channel without the use of PKI and/or
persistent password (ie. w/o authentication, like in the telephone network)?
Of course the communication must be encrypted against passive MITM,
and must also detect active MITM.
Does anybody know of such a protocol, info, papers etc.?
--
Thx
U.Mutlu
More information about the Messaging
mailing list