4 ms·
> Yes, they could serve you a MITM key, but it would be easily discoverable when you compare security codes in the client. Who does that for every conversation
by mtgx 8y ago
> Yes, they could serve you a MITM key, but it would be easily discoverable when you compare security codes in the client.
Who does that for every conversation? Or even once per week/contact?
- exacube 8y agosecurity researchers
- vinay_ys 8y agoSo put them in a cohort and treat them differently than the rest of the users? Personalised key exchange? Possibilites are endless. If you don't trust the closed source operator here, then that end to end encryption should mean nothing for you.
- bronco21016 8y agoOr use a client like Signal that tells you when the key has changed.