I programmed a addon that provides a Facebook-like chat using Jappix Mini. To make sure I did it right, I have some short questions concerning DFRN. When two users get friends, a key pair is generated (pubkey and prvkey). Are the following statements true?
- The pubkey is not actually public. Only one user knows it (and his friend could reconstruct it from prvkey).
- The DFRN protocol relies on this - if the pubkey would get published on the internet, this would be very bad.