Update on the CW

[Andrew Maslar]

Hello all.

It's been about 8 months since I did any reading on the state of
cryptography. I have two questions. Any info is appreciated.

1. Anybody heard anything bad about MD5 or Diffie-Hellman?

2. What's the prevailing wisdom regarding protection against
man-in-the-middle attacks when using Diffie-Hellman for key exchange?
I'd love to avoid using a certificate authority, if possible.

Thanks.

-Andrew