4. Directory service could be modified to enable a MITM attack? Yes
This is incorrect, as there is no user directory service, and MITM by relays is not possible by design, even without optional security code verification (that exists to mitigate MITM by the channel you used to pass one-time invitation link, e.g. email).
SimpleX Chat /
npub1ht…q3f5x
2024-08-24 12:12:08
in reply to nevent1q…k5ms
Author Public Key
npub1ht6s6d0xuscv0rkt09wt7y7wzfvs6d6uk3ysf3kan44a040hh2ds5q3f5xPublished at
2024-08-24 12:12:08Event JSON
{
"id": "9b148c89128e6a816dae17204e1ed8340951320c7bb6ad87066bc80109819517",
"pubkey": "baf50d35e6e430c78ecb795cbf13ce12590d375cb44904c6dd9d6bd7d5f7ba9b",
"created_at": 1724501528,
"kind": 1,
"tags": [
[
"e",
"5a2217802f79ec83ac89197b4b29f18b6bfe291c80f9f16a4d37d465a21ed877",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://mastodon.social/users/simplex/statuses/113016932170590662",
"activitypub"
]
],
"content": "4. Directory service could be modified to enable a MITM attack? Yes\n\nThis is incorrect, as there is no user directory service, and MITM by relays is not possible by design, even without optional security code verification (that exists to mitigate MITM by the channel you used to pass one-time invitation link, e.g. email).",
"sig": "2ab43e4e3411a0feff74d5bcbb99dc59103796dab004577bad5ee194158c2ab4844a406022ef36a343ac077b023ff10846137d217793de8d4ae13ac8a71f2e12"
}