I'm talking more about authentication over a channel that's not necessarily encrypted.
The point being, avoiding having the client send its "secret pass word" to the server, but still allowing the server to verify the identity of the client.
It's also what SSH uses.
Hope that's helpful!
I don't want to share my secret with you. You just throw a test at me that only I could possibly answer.
The point is, every time you should throw a completely different test at me.
Not only you can verify my identity, but anyone who's listening to the conversation can also verify my identity, and I don't have to share any secret.
Yes, once you've done a DH exchange, you can use the established key to relay a nonce to prove both sides have the same key.
But tptacek obviously knows what he is talking about.
There's a lot of dazzle and he seems to be going out of his way to confuse people, or he is himself confused.