3 ms·

I am so cynical (or is that realistic?) these days, that I would not trust the encryption on WhatsApp as far as I can throw a large, adult saltwater crocodile.

• kasey_junk 11y ago
  They implemented a known & vetted encryption protocol with expert consultation from the outside. Its one of the most widely distributed apps in the world & thus likely to have lots of people looking at it. If you don't trust it, is there any possible encryption scheme you would trust?
  • darklajid 11y ago
    I think the general trust issues people have are - metadata / contact lists in the hand of Facebook - a proprietary binary that _claims_ to use said encryption schemes Scenarios that you could come up with: The next version of WhatsApp sends unencrypted data again. WhatsApp encrypts for your recipient just fine, but also encrypts the same message for the great Facebook skeleton key. Basically trust is a bigger problem than you acknowledge here, I think. If you trust the encryption scheme, even the specific encryption implementation, then you still need to trust the (binary, closed) application. Ignoring the metadata issue completely for now.
    • rtkwe 11y ago
      >The next version of WhatsApp sends unencrypted data again. >WhatsApp encrypts for your recipient just fine, but also encrypts the same message for the great Facebook skeleton key. Both of these can and would show up in an analysis of the code.