search

nextleap-project / countermitm

thoughts on countering mitm-attacks on autocrypt
15 stars 5 forks source link

Gossip headers when using Autocrypt #48

Closed carmelatroncoso closed 6 years ago

carmelatroncoso commented 6 years ago

At the beginning, we say that the Gossip headers do not change. Is this true? If this is the case what is the use of the Autocrypt? Or does the gossip only include the sender's key?

azul commented 6 years ago

@carmelatroncoso I'm not sure what you are referring to. Can you point me to the section and cite the phrase?

Thanks! :sun_with_face:

carmelatroncoso commented 6 years ago

Section inclusion in messages, under "Use and architecture". Now has my version (of what I thought you wanted to say), but before it read like this:

Every mail has the Autocrypt header as usual:

Autocrypt: ... Gossip headers are left untouched (in contrast to in-band cc).

In addition we include a header with our head imprint (root hash of our latest CC block) in the encrypted and signed part of the message:

azul commented 6 years ago

Ahh... I think now i understand the confusion. I was trying to say that the gossip headers are left untouched by the claimchain addition. The headers themselves contain the senders believ about all recipients keys.

I will look at the current version and try to make this more clear. I think i will remove the entive part talking about what stays the same.

azul commented 6 years ago

Just read the section after you rewrote it and it exactly covers what i meant. Thanks!