[liberationtech] PGP is hard to use and needs stuff installed on your computer. Use PassLok instead.

[Tony Arcieri]

On Sun, Jul 28, 2013 at 1:32 PM, Francisco Ruiz <ruiz at iit.edu> wrote:

> - How do I communicate a password to Bob? Before I "get a crucial bit
> of information" to Bob, I need to first get a crucial bit of information
> to Bob?
>
> Alice should send her Lock (public key) to Bob rather than anything
> secret.
>

How? At the very least Alice/Bob need an authenticated/trusted channel for
this.

If Alice sends Bob her "public key" over an untrusted channel, it can be
intercepted by an MitM posing as Bob who can then intercept all traffic
between Alice/Bob

-- 
Tony Arcieri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20130728/4158fa82/attachment.html>