Matrix with Martin Albrecht and Dan Jones
Security Cryptography Whatever
00:00
You Can't Have Strong Confidentiality Without Authentication
Both attacks D and E build on top of attack C, which is the semi-trusted impersonation you just described. The key sharing messages are expected to be sent over the own protocol, not over mega home. But that wasn't quite implemented right in elements, like kind of the flagship clients. And instead they would accept those messages. So a particular kind of message type over mega home sessions. You can now generate a new mega home session, but send it as if you've just created a new megahome session via the normal mega home protocol,. Not via the key sharing protocol. It's sort of maybe confusing in hand.
Transcript
Play full episode
