Closed mitar closed 1 year ago
Registration is the only stage in OPAQUE that requires a server-authenticated and confidential channel: either physical, out-of-band, PKI-based, etc.
I think the channel also has to protect integrity?
Perhaps this should be:
Registration is the only stage in OPAQUE that requires a server-authenticated channel with confidentiality and integrity: either physical, out-of-band, PKI-based, etc.
I think the channel also has to protect integrity?