3 ms·
Doesn't this mean that only subsequent messages can be decrypted? i.e. Whatsapp has provided forward secrecy (as long as they haven't been using this trick from
by rahilb 10y ago
Doesn't this mean that only subsequent messages can be decrypted? i.e. Whatsapp has provided forward secrecy (as long as they haven't been using this trick from the initial secrets that were set up)?
- vorticalbox 10y agoPretty sure that is the case. the key is changed while you're offline making any unsent messages use the new key that they know. But if they can change the key while you're offline that means they can change the key and know everything from that point on.
- FabHK 10y agoThough you would get the key-change-notification (if you had enabled it, overriding the default), and could then verify fingerprints via some other channel.