{"id":5735,"date":"2017-09-13T17:46:47","date_gmt":"2017-09-14T00:46:47","guid":{"rendered":"https:\/\/cldc.org\/?post_type=post&#038;p=5735"},"modified":"2026-04-23T16:38:26","modified_gmt":"2026-04-23T23:38:26","slug":"authenticity","status":"publish","type":"post","link":"https:\/\/cldc.org\/hi\/authenticity\/","title":{"rendered":"The importance of authenticity"},"content":{"rendered":"<p>Short of meeting face-to-face with a person you really know, it is sometimes impossible to know if the person you are communicating with is who you think it is.<\/p>\n<p>In the 60s and 70s, the FBI took advantage of folks&#8217; trust in what they read.\u00a0 The FBI later became known, as part of COINTELPRO, to send anonymous, pseudonymous and forged letters and pamphlets in order to disrupt campaigns or incite intergroup violence.\u00a0 As a striking example of the latter, the FBI distributed a cartoon supposedly by the <a href=\"https:\/\/en.wikipedia.org\/wiki\/US_Organization\" target=\"_blank\" rel=\"noopener noreferrer\">United Slaves<\/a> showing Black Panther Party members being assassinated. After observing interactions between the two groups, the FBI claimed success in instigating the deaths of two Black Panther Party members by United Slaves gunmen. (Pages 187\u2013223 in\u00a0<a href=\"https:\/\/archive.org\/details\/finalreportofsel03unit\" target=\"_blank\" rel=\"noopener noreferrer\">Book III: Supplementary detailed staff reports on intelligence activities and the rights of Americans<\/a>\u00a0from the <a href=\"https:\/\/archive.org\/search.php?query=creator%3A%22United+States.+Congress.+Senate.+Select+Committee+to+Study+Governmental+Operations+with+Respect+to+Intelligence+Activities%22\" target=\"_blank\" rel=\"noopener noreferrer\">Church Committee Reports<\/a>.)<\/p>\n<p>Now that our communications largely take place online, such tactics can be automated &#8212; emails are very <a href=\"https:\/\/en.wikipedia.org\/wiki\/Phishing\">easy to forge<\/a> and even <a href=\"https:\/\/www.wnycstudios.org\/story\/breaking-news\">photos and videos cannot necessarily be trusted<\/a>. However, there are cryptographic tools we can use to certify that (1) a message has not been tampered with and (2) the sender is who you think it is &#8212; these are the properties of <strong>authenticity<\/strong>.\u00a0 The ability to check authenticity is built in to many secure messaging apps, such as Signal, but to use these features it is necessary to perform a validation step in a manual or semi-manual way through a process called <strong>fingerprinting<\/strong>.<\/p>\n<p>Assuring authenticity in the electronic world requires the use of a <a href=\"https:\/\/simple.wikipedia.org\/wiki\/Key_(cryptography)\">cryptographic key<\/a>.\u00a0 If you and your friend are trying to communicate privately, you need to exchange keys.\u00a0 This is usually done using the same communication channel.\u00a0 If a malicious third party (<a href=\"https:\/\/simple.wikipedia.org\/wiki\/Man-in-the-middle_attack\">The-Man-in-the-Middle<\/a>) is intercepting your communications starting with your first key-exchange steps, that third party could replace your keys with their own and you would never know it &#8212; this would allow them to intercept, read and change messages between you and your friend.\u00a0 So you and your friend should compare each of your cryptographic keys by a separate communication channel (such as by a phone call, or in person, or by carrier pigeon).\u00a0 This &#8220;out-of-band&#8221; comparison of cryptographic keys is the process of fingerprinting and validating that the key you have truly belongs to your friend is what guarantees authenticity.\u00a0 (In <a href=\"https:\/\/cldc.org\/hi\/signal-activist-best-practices\/\">Signal<\/a>, you do this by comparing &#8220;<a href=\"https:\/\/signal.org\/blog\/verified-safety-number-updates\/\">safety numbers<\/a>&#8220;.)<\/p>\n<p>Stay safe out there.<\/p>","protected":false},"excerpt":{"rendered":"<p>Short of meeting face-to-face with a person you really know, it is sometimes impossible to know if the person you are communicating with is who you think it is.<\/p>","protected":false},"author":1,"featured_media":6011,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[12],"tags":[237,179],"class_list":["post-5735","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-fundamentals","tag-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/posts\/5735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/comments?post=5735"}],"version-history":[{"count":1,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/posts\/5735\/revisions"}],"predecessor-version":[{"id":18365,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/posts\/5735\/revisions\/18365"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/media\/6011"}],"wp:attachment":[{"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/media?parent=5735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/categories?post=5735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/tags?post=5735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}