3 ms·
Tl;dr: Wire voice and video chats use SRTP encryption, but the key is transmitted over the Wire server using normal TLS without further authentication checks or
by ge0rg 10y ago
Tl;dr: Wire voice and video chats use SRTP encryption, but the key is transmitted over the Wire server using normal TLS without further authentication checks or Certificate Pinning. A Wire employee or malicious government could MitM the claimed end to end encryption.
- tyingq 10y agoThe point that the servers are in Ireland, versus Switzerland, is interesting as well, given that "Swiss Based" is used as a marketing pitch.
- zokier 10y agoOn a quick browse I found these two references to Switzerland: Frontpage: "Swiss-based, EU hosted" Bottom of the "Privacy" page: "Wire is based in Switzerland and is fully compliant with Swiss and EU data protection laws." I don't think that is "making a big deal", or even misleading. Especially the frontpage reference is actually really honest.
- tyingq 10y agoIt's not outright dishonest, but it seems pretty clear why they like the word "Swiss", but generalize Ireland as "EU". I'm sure many of their customers read that as "Oh, it's all in Switzerland, where privacy matters." I know Switzerland isn't in the EU, but I suspect not all their potential customers know that.
- trizinix 10y agoIs it really based in Switzerland? If you look at the jobs page, they are all in Berlin. My guess would be registred in Switzerland, based in Germany and Data stored in Irland.