3 ms·
It's not TLS.
by dchest 11y ago
It's not TLS.
- ecesena 11y agoUgh. Should we be scared then?
- ascorbic 11y agoTLS would normally be used between the client and server. Viber may use TLS for that too, though WhatsApp and Signal use Noise pipes for that purpose. The point of end to end encryption is that they're also encrypting the messages so that they can't be read on the server. Don't know what Viber is using, but moxie posted a link to the details about WhatsApp's implementation. https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf https://www.whatsapp.com/security/WhatsApp-Security-Whitepap...
- CiPHPerCoder 11y agoTLS is Transport Layer Security. When we're talking about End-to-End Encryption, we usually mean: * Application Layer Security (between users) * Transport Layer Security (between each user and the server) And here, Security should mean public key authenticated encryption (e.g. crypto_box() from NaCl)