like, if I send the QR code to someone I want to talk to via email, anyone intercepting this message will at the very least know my SimpleX address; same thing if I send it via messenger.

edit: let’s assume we don’t have an established and trusted channel. furthermore, they’re not expecting this info.

  • Evgeny PoberezkinM
    link
    fedilink
    English
    arrow-up
    1
    ·
    11 months ago

    You don’t have to encrypt the message, simply observing it won’t compromise security. You only need to ensure that the channel is 1) authenticated (that is, you know who you send to) 2) cannot MITM you (that is, replace the link). MITM can be mitigated with security code verification via yet another channel, but SimpleX relays cannot MITM key exchange (unlike any centralised service).

    • dingdongitsabearOP
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 months ago

      valid, but observing it will reveal that this SX address is linked to this email address and there won’t be any return information that it was read and thus compromised, if I understood everything correctly?

      I’m looking for a way to send my address to someone with whom I haven’t established a secure channel and this party doesn’t expect my contact info.

      what I came up with is hosting a web server with said info and making sure it will serve this url only once and then delete it. I can then send this url and be sure that either the intended party received it or that it was intercepted.