TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Conversations v1.15.0 released with new trust/verification concept

11 点作者 inputmice超过 8 年前

1 comment

ge0rg超过 8 年前
<i>Train somebody long enough to ignore those warnings and you’ve essentially made End-to-End-Encryption completely useless.</i><p><i>Encryption without verification is ineffective.</i><p>Opportunistic encryption (without authentication) is still a very valuable tool, as it prevents passive attackers from reading your traffic. To actually intercept encrypted-but-unauthenticated messages, an attacker needs to obtain an (often permanent) MitM position, which is not impossible but still much harder to achieve.