3 ms·
Same can be done if e2e is enabled. Nothing prevents Facebook from sending links from client to a "validation" service. They do this already in WhatsApp for in
by kerng 7y ago
Same can be done if e2e is enabled. Nothing prevents Facebook from sending links from client to a "validation" service.
They do this already in WhatsApp for instance.
- JadeNB 7y agoMaybe I'm being foolish, but isn't the point of e2e that Facebook wouldn't even know what you were sending (a link or otherwise), it being encrypted in flight?
- progval 7y agoYes, but it's hard to trust e2e when keys go through a blackbox (Facebook's API), and clients are controlled by Facebook (closed source applications and JS). It's better than no encryption, but not what technical people usually mean by e2e encryption
- roywiggins 7y agoThe WhatsApp client knows, since that's the "end." Nothing technical stops Facebook from bundling some code in the client to pass data about the messages back to a central server.
- kerng 7y agoFacebook can send the URLs from client to their service, that just bypasses the e2e channel and opens up a nice side channel for Facebook to peek into messages.
- deleted 7y ago[deleted]