Post #3018140
2026-01-06 17:13 UTC
@Ichinin@infosec.exchange i'm not sure i follow, you refering to tls? the article the quote comes from does not. the quote itself points out a general issue that (m)tls might or might not have solved (depending on threatmodel).
Replies (1)
-
@Ichinin@infosec.exchange 2026-01-06 20:09
@stf@chaos.social I commented on your post, and the statement that keys is the problem seems a bit out of touch with how cryptography works IRL. It is a universal problem and keys are not the problem, it is authentication of both sides that is lacking in general. If you just send over a (public)key it can be intercepted and replaced easily if it isn't signed and validated by both sides and interception becomes a reality.