25 ms·
I'm very surprised by this. What about WhatsApp and other messaging apps?
by nahumfarchi 9y ago
I'm very surprised by this. What about WhatsApp and other messaging apps?
- bjoli 9y agoWhatsApp is e2e by default. As is Signal, Wire, Threema (although Threema has no forward secrecy) and iMessage (which has no way of verifying keys, which makes it useless to the end user).
- dbrgn 9y agoThreema doesn't have forward secrecy on the message encryption layer, but it does on the network transport protocol layer.
- bjoli 9y agoWhich means that the server or any malicious person on the server could just save your messages and decrypt them all at a later date.
- dbrgn 9y agoTheoretically yes, but for that the end user would have to get his private key stolen by someone with undetected server access or someone would have to break the XSalsa20 cipher.