> It still feels weird to have security experts characterize WhatsApp's choice as acceptable; They're not acceptable in general. They're acceptable within the

> It still feels weird to have security experts characterize WhatsApp's choice as acceptable; They're not acceptable in general. They're acceptable within the context of the problem they are trying to solve, which isn't "make crypto nerds happy". Their users, by and large, know absolutely nothing about cryptography. Any attempt to add key verification will either: - Spook them - Intimidate them - Confuse them - Make them move to an insecure platform that their contacts already use; i.e. SMS - All of the above