3 ms·
Given that it was built by a highly trusted cryptography team, plus the fact that the protocol can be reverse engineered to confirm encryption and decryption on
by anilgulecha 7y ago
Given that it was built by a highly trusted cryptography team, plus the fact that the protocol can be reverse engineered to confirm encryption and decryption on device, and that over-the-wire traffic has no plaintext, the trust in this is indeed very high.
WA has a lot to lose, and big enough target on it for a backdoor to have been found, if E2E is false.
- ncmncm 7y agoApparently anilgulecha is, like many, unaware that WhatsApp is no longer end-to-end encrypted. It technically trivial to tap the traffic between decrypting and re-encrypting stages, and the only plausible reason for the very expensive change was to enable such access.
- inanutshellus 7y agoLooking at WhatsApp's website [1], instead of saying "your messages are definitely end-to-end encrypted at all times" they say it's "available", as in this sentence: > WhatsApp's end-to-end encryption is available when you and the people you message use our app. Is that what you're referring to? [1] https://www.whatsapp.com/security/ https://www.whatsapp.com/security/
- ncmncm 7y agoI just remember a report that the end-to-end quality inherited from its Signal origins had been removed. At the time, the innocent-ish explanation suggested was for access to keywords for ad targeting.