3 ms·
You contradict with your previous statement that Signal does not provide OOB key verification when they show you the fingerprints. Because that is essential for
by venomsnake 11y ago
You contradict with your previous statement that Signal does not provide OOB key verification when they show you the fingerprints. Because that is essential for not being MITM.
- simoncion 11y ago> You contradict with your previous statement that Signal does not provide OOB key verification... I do no such thing because I never made such a statement. I addressed your claim about mandatory OOB key exchange, not optional verification. To jog your memory, the two times I brought up OOB exchange were as follows: >> Last time I checked whats app didn't require any kind of OOB key exchange, or ability to set your own password. > Neither does Signal/TextSecure. Signal most definitely has E2E encryption. [0] and > Signal neither requires OOB key exchange, nor does it require that you set a password to encrypt Signal data while on disk. [1] Notice that I talk about how Signal doesn't require OOB key exchange, not that Signal doesn't provide OOB key verification. [0] https://news.ycombinator.com/item?id=11124807 https://news.ycombinator.com/item?id=11124807 [1] https://news.ycombinator.com/item?id=11125534 https://news.ycombinator.com/item?id=11125534