3 ms·
Doesn't appear to mention metadata at all. While metadata is somewhat tangential to the actual encryption, it's still a vital part of a truly secure messaging
by jfindley 11y ago
Doesn't appear to mention metadata at all.
While metadata is somewhat tangential to the actual encryption, it's still a vital part of a truly secure messaging platform - who we talk to reveals quite a lot about us.
I'm not sure how solvable this is without sacrificing the usability that makes whatsapp as nice to use as it is, and I certainly don't want to take away from how great it is that they've done this - but it is important not to lose sight of the fact that encrypting the contents of your messages is only one part of the puzzle.
- edhelas 11y agoIt's the same problem with Signal actually ;) All the communications of the official clients are sent to some "official" Signal Amazon servers (see https://github.com/WhisperSystems/Signal-Android/blob/master/build.gradle#L166-172 https://github.com/WhisperSystems/Signal-Android/blob/master...). Doing end to end encryption is nice, but I really think that having a decentralized AND standard architecture is also very important.
- nxzero 11y agoAgree. Reluctant to be critical of the topic, given how much those involved have managed to get done, but it is very concerning to me from what I'm able to tell how low priorty this issue appears to be. Second issue that to me is pressing given the volume of users is that in my opinion a commitment to execute an audit of the code/crypto/workflow/etc needs to be made; I'd start a campaign to fund this, but such a campaign would be much more likely to succeed if offically acknowledged and more importantly, resources are provide internally to enable it.