From 89626432fdb1db93b4b78a9304e88c89696442ea Mon Sep 17 00:00:00 2001
From: Joey Hess <joeyh@joeyh.name>
Date: Tue, 6 Dec 2016 16:55:53 -0400
Subject: PAKE

---
 doc/design/assistant/telehash.mdwn | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/doc/design/assistant/telehash.mdwn b/doc/design/assistant/telehash.mdwn
index 5c410999f..14b617c33 100644
--- a/doc/design/assistant/telehash.mdwn
+++ b/doc/design/assistant/telehash.mdwn
@@ -123,6 +123,10 @@ so won't want to type that in. Need discovery.
   for Bob to confirm he's ready to finish pairing, this will fail,
   because Bob won't get to that point if the authtoken is intercepted.
 
+  Check out
+  <https://en.wikipedia.org/wiki/Password-authenticated_key_agreement>
+  for more MITM resistance.
+
 ## local lan detection
 
 At connection time, after authentication, the remote can send
-- 
cgit v1.2.3