3 ms·
The server part as well?
by pmlnr 9y ago
The server part as well?
- sp332 9y agoIf you can be sure that the part running on your phone encrypts the message, then it doesn't matter as much what's running on the server. Anyway being open source wouldn't improve the auditability of the server.
- cesarb 9y agoThe whole point of it being E2E encrypted is that you don't need to audit the server. As long as it's implemented correctly on the client, both users verified the shared key out-of-band, and both users have enabled the option to warn when the shared key changes, the most the server can do is traffic analysis or denial of service.