diff --git a/312/notes/hash.md b/312/notes/hash.md index 8bc362c..46eb9d1 100644 --- a/312/notes/hash.md +++ b/312/notes/hash.md @@ -34,5 +34,5 @@ In English: _Only inputs can find outputs, not the other way around._ _Hashes are not secure ffs_. When we say authentication we really mean that we are checking to ensure there has been no changes to the original message. _NOTE:_ this really doesn't guarantee anything in communications susceptible to man-in-the-middle attacks. -Let's get real for minute: Think of it this way a message is like a car and the key is our hash. If the key doesn't fit in the slot then its not our car, **but** if we sent our car + key oversees whoever steals the car + key has full control and we lose security effectively. Using SSL is _kinda_ like putting that car + key combo in a box that nobody except the recipient can open. +**Let's get real for minute:** Think of it this way a message is like a car and the key is our hash. If the key doesn't fit in the slot then its not our car, **but** if we sent our car + key oversees whoever steals the car + key has full control and we lose security effectively. Using SSL is _kinda_ like putting that car + key combo in a box that nobody except the recipient can open.