5 ms·

Whatsapps keys are stored on their servers, which Facebook owns. I don't consider WhatsApp anymore secure than Twitter DMs.

• ubercow13 8y ago
  Are they? That seems like an extraordinary claim. Do you have a source?
  • rickycook 8y ago
    it’s not quite that brazen, but from what i remember the whatsapp server can push a new public key for your contact/chat to the device, which means that they can MITM you. the chat shows that the key changed, but most users wouldn’t know what that means and ignore it
    • ubercow13 8y ago
      Isn't that how Signal works too? What else would it do, disallow you from continuing the chat if the key changes?
      • acct1771 8y ago
        Until reverification? Sure.
        • ubercow13 8y ago
          In that case most users similarly won't know what reverification means and will just click through without verifying anything. It's not reasonable to say that that makes Whatsapp only as secure as Twitter DMs.