The latest AleHu version 'AleHu 20150106.zip' ships with a preconfigured AleHu test server that runs under HTTPS. Thus, the whole startup procedure for registering your public key with the server is SSL encrypted and should thus avoid any 'man in the middle' attack.