{"action":"created","issue":{"url":"https://api.github.com/repos/otrv4/otrv4/issues/145","repository_url":"https://api.github.com/repos/otrv4/otrv4","labels_url":"https://api.github.com/repos/otrv4/otrv4/issues/145/labels{/name}","comments_url":"https://api.github.com/repos/otrv4/otrv4/issues/145/comments","events_url":"https://api.github.com/repos/otrv4/otrv4/issues/145/events","html_url":"https://github.com/otrv4/otrv4/issues/145","id":322604189,"number":145,"title":"Not verifying Alice's ephemeral public keys is intentional? (Interactive DAKE)","user":{"login":"cobratbq","id":1936470,"avatar_url":"https://avatars0.githubusercontent.com/u/1936470?v=4","gravatar_id":"","url":"https://api.github.com/users/cobratbq","html_url":"https://github.com/cobratbq","followers_url":"https://api.github.com/users/cobratbq/followers","following_url":"https://api.github.com/users/cobratbq/following{/other_user}","gists_url":"https://api.github.com/users/cobratbq/gists{/gist_id}","starred_url":"https://api.github.com/users/cobratbq/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cobratbq/subscriptions","organizations_url":"https://api.github.com/users/cobratbq/orgs","repos_url":"https://api.github.com/users/cobratbq/repos","events_url":"https://api.github.com/users/cobratbq/events{/privacy}","received_events_url":"https://api.github.com/users/cobratbq/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-05-13T15:39:09Z","updated_at":"2018-05-13T15:54:58Z","closed_at":"2018-05-13T15:48:31Z","author_association":"NONE","body":"Upon receiving an Identity message, we [verify the public keys provided by Bob](https://github.com/otrv4/otrv4/blob/master/otrv4.md#identity-message). (Point Y and public key B) However, upon receiving an Auth-R message [we immediately continue using the public keys provided to us in the AUTH_R message](https://github.com/otrv4/otrv4/blob/master/otrv4.md#auth-r-message). (See section \"To verify an Auth-R message\".)\r\n\r\nIs this intentional? If so, why is this not needed, because the applications seem rather symmetric, so I don't see why one would be more trustworthy than the other."},"comment":{"url":"https://api.github.com/repos/otrv4/otrv4/issues/comments/388636825","html_url":"https://github.com/otrv4/otrv4/issues/145#issuecomment-388636825","issue_url":"https://api.github.com/repos/otrv4/otrv4/issues/145","id":388636825,"user":{"login":"cobratbq","id":1936470,"avatar_url":"https://avatars0.githubusercontent.com/u/1936470?v=4","gravatar_id":"","url":"https://api.github.com/users/cobratbq","html_url":"https://github.com/cobratbq","followers_url":"https://api.github.com/users/cobratbq/followers","following_url":"https://api.github.com/users/cobratbq/following{/other_user}","gists_url":"https://api.github.com/users/cobratbq/gists{/gist_id}","starred_url":"https://api.github.com/users/cobratbq/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cobratbq/subscriptions","organizations_url":"https://api.github.com/users/cobratbq/orgs","repos_url":"https://api.github.com/users/cobratbq/repos","events_url":"https://api.github.com/users/cobratbq/events{/privacy}","received_events_url":"https://api.github.com/users/cobratbq/received_events","type":"User","site_admin":false},"created_at":"2018-05-13T15:54:58Z","updated_at":"2018-05-13T15:54:58Z","author_association":"NONE","body":"Okay, good to know. May be we should strip down one of the two sections a bit, as there seems to be a bit of overlap now. I find the earlier section easier to work with (during implementation) as it discusses the intricacies of the message contents both from the sender's as well as the receiver's perspective. However, given that it is also the earlier section I would indeed like at least a reference to it - if not more.\r\nThanks for the fast response."}}
{"actor":{"display_login":"cobratbq"}}