Victor Duchovni wrote:

> No. Without a previously arranged shared secret and no trusted introducer,

DH doesn't require anything but mutual knowledge of public
keys, since the shared secret is implicit.  Either OOB or
via a trusted directory service, or a cert binding the identity
of a principal to a pubkey suffice.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to