You are signed in. Close

You are signed out. Close

Thank you. Your subscription has started. Close

Thank you. You will get an email when a new comic comes out. Close

We could not confirm your payment. If you paid, use the link "Sign in" at the bottom of the page. Close

Something went wrong on our side. Please try again in a moment. Close

Previous episode Diffie-Hellman key exchange: how your phone and a website build the same key without sending it

What the HTTPS padlock means: how your browser talks in secret on a Wi-Fi anyone can read

Man-in-the-middle attack: why a secret key is useless with the wrong person

Encryption stops a stranger from reading the talk between your phone and a website. So an attacker on the same Wi-Fi stops listening. Instead, he puts himself in the middle of the talk.

  1. 1 Copies are not enough for Rono's plan: he wants to stand between Miva and the shop. So his laptop sends out a Wi-Fi of its own, with the café's name. Miva's phone joins it, and from now on every packet she sends goes to Rono first.Wi-FiCafé Wi-FiCafé Wi-FijoinedCafé Wi-FiRono's laptop

    Copies are not enough for Rono's plan: he wants to stand between Miva and the shop. So his laptop sends out a Wi-Fi of its own, with the café's name. Miva's phone joins it, and from now on every packet she sends goes to Rono first.

  2. 2 Her phone sends its mix, meant for the shop. Rono keeps it and sends back a mix of his own. The phone builds a key with him, sure it is talking to the shop.Hello, shop!MivaRonoMiva's mixRono's mixa key with Rono

    Her phone sends its mix, meant for the shop. Rono keeps it and sends back a mix of his own. The phone builds a key with him, sure it is talking to the shop.

The rest of this episode is for subscribers

Subscribe to read every premium episode. You can cancel when you want.

Paid yearly: $99 instead of $119.88

Next episode Digital signatures: how a website proves who it is without showing its secret

Share this comic

More comics