Victor Duchovni wrote:

> No. Without a previously arranged shared secret and no trusted introducer,

DH doesn't require anything but mutual knowledge of public
keys, since the shared secret is implicit.  Either OOB or
via a trusted directory service, or a cert binding the identity
of a principal to a pubkey suffice.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to