2 ms·
Conversations v1.15.0 released with new trust/verification concept
- ge0rg 10y agoTrain somebody long enough to ignore those warnings and you’ve essentially made End-to-End-Encryption completely useless. Encryption without verification is ineffective. Opportunistic encryption (without authentication) is still a very valuable tool, as it prevents passive attackers from reading your traffic. To actually intercept encrypted-but-unauthenticated messages, an attacker needs to obtain an (often permanent) MitM position, which is not impossible but still much harder to achieve.