Hacker News Reader

The client can be sent encryption keys, generated by the server, and use them for P2P encryption, so the MITM can be avoided.

That's great if the server that sends the encryption keys is actually the server you think you're talking to.