How does the man in the middle attack work in Diffie–Hellman?

I think you’re confusing the basic Diffie-Hellman, which is a key exchange protocol, with the ‘authenticated version’ which uses a certificate authority (CA). Nice explanation of how the basic Diffie-Hellman is vulnerable to man-in-the-middle from RSA Labs. “The Diffie-Hellman key exchange is vulnerable to a man-in-the-middle attack. In this attack, an opponent Carol intercepts Alice’s … Read more