XSF Discussion - 2019-02-10

lucky me, python already does the \u escape when dumping JSON for surrogates and control characters

ah, I've heard back from the unstable.nl admin

let's see if we can close that can of spam.

Matthew, re e2ee, all these guarantees obviously assume fingerprint validation right? There's no bypassing this?

(I wish I had a magical answer for this..)

pep.: No, someone has to verify someone at some point for cryto dust to do its magic

Yeah, and that's usually where people fail (lazyness, inconvenience, ignorance, whatever you want to call it)

I usually call that "users"

we’ve ditched fingerprint validation

in favour of interactive verification

https://github.com/matrix-org/matrix-doc/issues/1267

and https://github.com/matrix-org/matrix-doc/issues/1543

etc

Right, it's the same thing, just with a different front

well, one’s comparing pub key fingerprints, the other’s verifying pub keys but not by direct comparison

in the end you’re matching keys to humans, for sure :)