4 ms·
Excellent! 3 questions: - What if the government forces WhatsApp to write and push a targeted software update in order to compromise the end-to-end encryption
by ngrilly 11y ago
Excellent! 3 questions:
- What if the government forces WhatsApp to write and push a targeted software update in order to compromise the end-to-end encryption (I'm of course thinking of the FBI vs Apple case)? Is there a way for the user to be notified?
- Does WhatsApp Auto Backup encrypt messages before sending them to Google Drive or iCloud?
- Would it be possible for WhatsApp Web to rely on backend servers storing an encrypted version of messages, instead of relying on a connection to the user's phone, and still be able to perform keyword search over the encrypted messages with something like github.com/strikeout/mylar?
- hollander 11y ago> - Does WhatsApp Auto Backup encrypt messages before sending them to Google Drive or iCloud? So you make a backup and loose the phone. What about the key? Is that gone too? Without it, encrypted backup is useless. How do you backup the key? You and me maybe will manage to do this, but what about grandma and all those people without anybody close who knows about this?
- bad_user 11y agoThe decryption key you're talking about can be a simple password. For symmetric encryption (e.g. AES-256) even a simple password would be secure enough, while something like a 24 chars password would be unbreakable.
- Ar-Curunir 11y agoNo, not really. Passwords are terribly low entropy, and so having a common password is not a solution, at least without using some sort of KDF or such.
- somesay 11y agoYou could backup the key like every other account password, too. Save it in your password manager, print it. Whatever. This isn't really an argument. When Android backups Wifi passwords, those are encrypted with your Google password that Google has only a hash of. Okay, it's easily interceptable the next time you login and Google has an warrant. But still an option.