4 ms·
The article explains in great length what the problem of iMessage is. It has no forward secrecy and uses no authenticated encryption. Signal does both. The flaw
by hannob 10y ago
The article explains in great length what the problem of iMessage is. It has no forward secrecy and uses no authenticated encryption. Signal does both.
The flaw Matthew Green's team found is precisely due to the fact that iMessage is not using authenticated encryption (as are tons of other crypto flaws). As said: They added some band aid, they have not fixed the problem.
- ejcx 10y agoSignal would be an improvement, but the status of signal as open source, and the details of what you get security wise is not very transparent with all of these new "signal integrations" that open whisper is doing. Signal is definitely moving things in the right direction but I wish there was more research in this "signal integration" space. Do you know of any research here?