From 60f4b1cf36f0b2e8233e1b48466e1b4106dd1175 Mon Sep 17 00:00:00 2001
From: Joey Hess <joeyh@joeyh.name>
Date: Tue, 6 Dec 2016 16:55:53 -0400
Subject: [PATCH] PAKE

---
 doc/design/assistant/telehash.mdwn | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/doc/design/assistant/telehash.mdwn b/doc/design/assistant/telehash.mdwn
index 5c410999fe..14b617c33b 100644
--- a/doc/design/assistant/telehash.mdwn
+++ b/doc/design/assistant/telehash.mdwn
@@ -123,6 +123,10 @@ so won't want to type that in. Need discovery.
   for Bob to confirm he's ready to finish pairing, this will fail,
   because Bob won't get to that point if the authtoken is intercepted.
 
+  Check out
+  <https://en.wikipedia.org/wiki/Password-authenticated_key_agreement>
+  for more MITM resistance.
+
 ## local lan detection
 
 At connection time, after authentication, the remote can send