51–54 of 54 posts
> Anonymous end-to-end encrypted End to end encryption implies that you have established an encrypted connection with a known participant and secured it by verifying your keys either off-band or via some CA provider to prevent MitM attack. If your chat partner is anonymous, and your only connection is via offered service, there is no way to determine if you are being spoofed. So anonymous end-to-end encryption is an…
> Anonymous end-to-end encrypted End to end encryption implies that you have established an encrypted connection with a known participant and secured it by verifying your keys either off-band or via some CA provider to prevent MitM attack. If your chat partner is anonymous, and your only connection is via offered service, there is no way to determine if you are being spoofed. So anonymous end-to-end encryption is an…
> Anonymous end-to-end encrypted End to end encryption implies that you have established an encrypted connection with a known participant and secured it by verifying your keys either off-band or via some CA provider to prevent MitM attack. If your chat partner is anonymous, and your only connection is via offered service, there is no way to determine if you are being spoofed. So anonymous end-to-end encryption is an…
In this case authentication is provided through a shared secret (the room name). An arbitrary MitM wouldn't know the room name since the connection to the server is also encrypted. Unfortunately this isn't much of a secret, since the server also knows the room name, but it's a start. There is an open issue to add password-protected rooms which would fix that problem.
This drastically limits the utility. Communication channels are only as secure as the least secure participant! Especially in shared-secret implementations.
Every so often, Grandma wants to be cool too. And invite her friends.
> Anonymous end-to-end encrypted End to end encryption implies that you have established an encrypted connection with a known participant and secured it by verifying your keys either off-band or via some CA provider to prevent MitM attack. If your chat partner is anonymous, and your only connection is via offered service, there is no way to determine if you are being spoofed. So anonymous end-to-end encryption is an…
In this case authentication is provided through a shared secret (the room name). An arbitrary MitM wouldn't know the room name since the connection to the server is also encrypted. Unfortunately this isn't much of a secret, since the server also knows the room name, but it's a start. There is an open issue to add password-protected rooms which would fix that problem.