[liberationtech] PGP is hard to use and needs stuff installed on your computer. Use PassLok instead.

[Doug Chamberlin]

Or the Man in the middle can pose as Alice to Bob and Bob would think all
subsequent communication with that person would be going to Alice.


On Sun, Jul 28, 2013 at 5:01 PM, Tony Arcieri <tony.arcieri at gmail.com>wrote:

> On Sun, Jul 28, 2013 at 1:32 PM, Francisco Ruiz <ruiz at iit.edu> wrote:
>
>> - How do I communicate a password to Bob? Before I "get a crucial bit
>> of information" to Bob, I need to first get a crucial bit of information
>> to Bob?
>>
>> Alice should send her Lock (public key) to Bob rather than anything
>> secret.
>>
>
> How? At the very least Alice/Bob need an authenticated/trusted channel for
> this.
>
> If Alice sends Bob her "public key" over an untrusted channel, it can be
> intercepted by an MitM posing as Bob who can then intercept all traffic
> between Alice/Bob
>
> --
> Tony Arcieri
>
> --
> Too many emails? Unsubscribe, change to digest, or change password by
> emailing moderator at companys at stanford.edu or changing your settings at
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20130728/ec90c68f/attachment.html>