Skip to content

Instantly share code, notes, and snippets.

@jacobian
Created February 4, 2013 19:21
Show Gist options
  • Save jacobian/4708879 to your computer and use it in GitHub Desktop.
Save jacobian/4708879 to your computer and use it in GitHub Desktop.
How I expect it to work:
Me: "Hey MIT, can I have Noah's key?"
MIT: "Sure, it's OxABCD"
Me: *signs message with OxABCD*
Me: "Great, now only Noah can read this!"
How it works with a MITM:
Me: "Hey MIT, can I have Noah's key?"
Attacker: "Sure, here's 'Noah's' key, it's Ox1234. Evil laugh."
Me: *signs message with Ox1234
Me: "Great, now only Noah can read this!"
If the communication with the keyserver isn't secured, how do I tell the difference?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment