On Tue, 02 Jul 2013 23:42:20 +0000, Ximin Luo wrote: ...
What sort of PKI are you using to verify the pubkey claimed by either side, to prevent MitM?
What for? The authentication happens in the next step, within the OR/bridge protocol. In this case we just have an additional layer of encryption around it.
Andreas