5 ms·
My question is, how can this be verified?
by subliminalpanda 11y ago
My question is, how can this be verified?
- mordocai 11y agoWatch the traffic go by with a packet sniffer? Verifying that it is done securely is a lot harder, but you can at least verify that things are not being sent as plain text/data.
- fweespee_ch 11y agoYeah but that just shows its https.
- arcticfox 11y agoCan't you MITM yourself fairly easily to decrypt the https and see what's being passed? Assuming you have full control of your device.
- dogma1138 11y agoWatching traffic is irrelevant, the encryption of the transport (WhatsUp always used TLS for that) is not in question here, this is about end to end encryption and if WhatsUp can either decrypt the data for users or switch them off E2EE at any point without it being noticeable to either end.
- M4v3R 11y agoThey have released a whitepaper [1] where they go into details of how the encryption works, so using this knowledge in theory one should be able to verify that the encryption is legitimate. [1] https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf https://www.whatsapp.com/security/WhatsApp-Security-Whitepap...
- subliminalpanda 11y agoNice! Thank you