[Monotone-devel] Re: netsync transport encryption?

[Bruce Stephens]

Dirk Hillbrecht <address@hidden> writes:

[...]

> The question is what you want: Encryption or authentication.

Ah, that's a good point.  The first time I pull from a repository I
don't have the server's public key.  And we want to permit anonymous
connections (as now) in which case the server doesn't know which of my
public keys to use (and quite likely doesn't have them anyway).

I guess in those cases perhaps encryption isn't really useful?

[...]