3 ms·
no proof without open source
by jamesdwilson 11y ago
no proof without open source
- kmch 11y agoYou could inspect the packets yourself to see that they are encrypted.
- jamesdwilson 11y agohow do i know they aren't sending the chat log in a side channel, encrypted?
- koide 11y agoIt's worse to use an encrypted but potentially compromised channel than a plain text one only when you assume the encryption is not in fact compromised, which you shouldn't do. So I fail to see the problem. It still likely protects you from nosy neighbors or nasty non tech savvy competitors, even if it doesn't protect you from state level actors or from Facebook itself. The above, in addition to the fact that open source is neither required for auditing, nor guarantees proper auditing occurring (see OpenSSL having vulnerabilities for years before anybody released them to the public)
- jamesdwilson 11y agoskype is encrypted too, and backdoored. don't forget whatsapp is owned by facebook.
- zanny 11y agoMatrix uses the Signal protocol for encryption as well, if you want a fully free implementation of the same tech. https://matrix.org/git/olm/ https://matrix.org/git/olm/
- jamesdwilson 11y agothanks! could i use it to connect to WhatsApp?
- zanny 11y agoWhatsApp uses a proprietary (fork of XMPP) messaging protocol and does not interoperate with anyone else (intentionally), like Hangouts and Skype, and unlike Matrix which is federated, and has gateways for IRC and XMPP already available.
- bad_user 11y agoThe open-source alternative is the Signal app made by Whisper Systems, the same people helping with WhatsApp from TFA, available for Android and iOS: https://whispersystems.org/ https://whispersystems.org/ Don't know what kind of funding they've been having, but for an open-source app, it's pretty polished.