4 ms·
I see, so you can verify but it's not by default. What happens if you add a new device (e.g. a tablet so a new fingerprint, which is different from changing mai
by goffi 7y ago
I see, so you can verify but it's not by default. What happens if you add a new device (e.g. a tablet so a new fingerprint, which is different from changing main device where the original fingerprint changes)? Is the new fingerprint accepted without user validation?
My point is that e2ee makes sense when you don't trust the server (here Signal company, or FB for whatsapp), so if most people don't check the fingerprints (and I assume it's the case), what's the real value of it?
- lvh 7y agoThis is a core difference between Signal and eg WhatsApp. The Signal UX clearly shows who’s verified, and the UX clearly earns you when the safety number changes. Additionally, the secondary device model (eg Signal Desktop) goes to great lengths not to break that. With WhatsApp, you’re trusting WhatsApp.