Comment by eslaught

Can someone talk about what this "auth" library is that djb talks about? What is its security model?

As best I can tell, it doesn't protect from MITM attacks. If so, I'm confused about what the point is.