What stops the server from swapping SyttenPK for NSA PK?
The operating word of the quote was "just".
> Hell even signal does that, who is really checking their contact security numbers to make sure the signal server didnt send you some bullshit...
Their latest code commits include key transparency, which is one good way to address this problem.
Key transparency is not really solving anything for the average person.
The problem is there's no way to know if the server is lying.
What stops the server from swapping SyttenPK for NSA PK?
The operating word of the quote was "just".
> Hell even signal does that, who is really checking their contact security numbers to make sure the signal server didnt send you some bullshit...
Their latest code commits include key transparency, which is one good way to address this problem.