That's a great analysis. I did spot one sentence which seems to use the wrong term though:

> Let participants verify RSA key fingerprints out of bounds

Presumably that should say "out-of-band".