4. Directory service could be modified to enable a MITM attack? Yes
This is incorrect, as there is no user directory service, and MITM by relays is not possible by design, even without optional security code verification (that exists to mitigate MITM by the channel you used to pass one-time invitation link, e.g. email).
SimpleX Chat
npub1gs…zfy6l
2024-08-24 12:12:08 UTC
in reply to nevent1q…rmwm
Author Public Key
npub1gsunl7x2y8ka4rn72y9zmzh0j8ntw8ln3956dxe4vg2mldpt4svsuzfy6lSeen on
wss://relay.momostr.pinkPublished at
2024-08-24 12:12:08 UTCEvent JSON
{
"id": "8196a0e79272c772541218a2bbdc786186f5a6318beb7fa86cbc218a5e10ef15",
"pubkey": "44393ff8ca21edda8e7e510a2d8aef91e6b71ff38969a69b356215bfb42bac19",
"created_at": 1724501528,
"kind": 1,
"tags": [
[
"p",
"44393ff8ca21edda8e7e510a2d8aef91e6b71ff38969a69b356215bfb42bac19"
],
[
"e",
"01d4d4cfc172ceeb76a744f65a92547303c3591e0208d720338032cefa8d52c7",
"",
"root",
"44393ff8ca21edda8e7e510a2d8aef91e6b71ff38969a69b356215bfb42bac19"
],
[
"e",
"3f4a641b98c3a1de8b5a38d6612af4536042e192a3e21f6e41d9a1af1ede1aaa",
"",
"reply",
"44393ff8ca21edda8e7e510a2d8aef91e6b71ff38969a69b356215bfb42bac19"
],
[
"proxy",
"https://mastodon.social/@simplex/113016932170590662",
"web"
],
[
"proxy",
"https://mastodon.social/users/simplex/statuses/113016932170590662",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/simplex/statuses/113016932170590662",
"pink.momostr"
],
[
"-"
]
],
"content": "4. Directory service could be modified to enable a MITM attack? Yes\n\nThis is incorrect, as there is no user directory service, and MITM by relays is not possible by design, even without optional security code verification (that exists to mitigate MITM by the channel you used to pass one-time invitation link, e.g. email).",
"sig": "c98c791596dc77f6dd9238a87ec727c642546da3d43ca3b22100cde6f7449c380453987e7260957c171dbea1c5ba5307d3f0dc9fa8941dd4f49cc493883e96a4"
}