Make sure you actually authenticate the key fingerprints. Note, doing this over ... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

anologwintermut on June 15, 2013 | parent | context | favorite | on: Off-the-Record Messaging – encrypt your instant me...

Make sure you actually authenticate the key fingerprints. Note, doing this over video chat (if you know what the other person looks like and sounds like) with a fresh key pair is a decent way.*

* Assuming you believe no one has the resources to impersonate your chat partner in near real time.

myf on June 15, 2013 [–]

Or you can use the Socilalist Millionaires' Protocol to exchange secret questions and answers that only both of you know http://www.cypherpunks.ca/otr/help/authenticate.php

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact