• onlinepersona@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    1 year ago

    How?

    If the OOB is not encrypted --> hello MITM attack or impersonation (unless of course you’re physically in the same place, which is quite limiting)

    If it’s encrypted, why not just keep using encrypted channel? I have to find an encrypted channel to initiate an encrypted chat?

    I’m not seeing the benefit

    • BearOfaTime
      link
      fedilink
      arrow-up
      4
      arrow-down
      1
      ·
      1 year ago

      I can give someone my ID in person. I control how it’s delivered.