Comment on Surespot app - free and open source encryption for everyoneparentComments−surespot13yThe threat model also suggests that you verify key fingerprints manually if you are concerned about MITM.−StavrosK13yYeah, I guess verifying the full length of the fingerprint would mitigate that, and not doing that exposes you to a MITM attack anyway. Not much less secure than exchanging the keys directly, then, you are right.
Comments
The threat model also suggests that you verify key fingerprints manually if you are concerned about MITM.
Yeah, I guess verifying the full length of the fingerprint would mitigate that, and not doing that exposes you to a MITM attack anyway. Not much less secure than exchanging the keys directly, then, you are right.