Re: Who is that sending?
I agree, and if there were a universal registry of trusted public keys and everyone had one, that would be fine. But the purpose of D-H (and similar protocols) is to generate a shared secret key using open messages over a public network, in a situation where at least one party has not implemented asymmetric encryption. It's also useful where one end would like both security and anonymity, often the case on public web services.
Biting the hand that feeds IT
