Editing Key-agreement protocol (section)

=== Public keys ===
A widely used mechanism for defeating such attacks is the use of [[digital signature|digitally signed]] keys that must be integrity-assured: if Bob's key is signed by a [[trusted third party]] vouching for his identity, Alice can have considerable confidence that a signed key she receives is not an attempt to intercept by Eve. When [[Alice and Bob]] have a public-key infrastructure, they may digitally sign an agreed Diffie–Hellman key, or exchanged Diffie–Hellman public keys. Such signed keys, sometimes signed by a [[certificate authority]], are one of the primary mechanisms used for secure [[web traffic]] (including [[HTTPS]], [[Secure Sockets Layer|SSL]] or [[Transport Layer Security|TLS]] protocols). Other specific examples are [[MQV]], [[YAK (cryptography)|YAK]] and the [[Internet Security Association and Key Management Protocol|ISAKMP]] component of the IPsec protocol suite for securing Internet Protocol communications. However, these systems require care in endorsing the match between identity information and public keys by certificate authorities in order to work properly.