4 ms·

>... end-to-end encrypted... How do you verify that you are connected to the person you think you are connected to?

• zumachase 6y ago
  There's a handshake before you accept a connection to anyone. Each peer generates a keypair and sends the public key to our servers (which they're authed with). On connection, peers receive the public key from the Squawk servers, and perform a handshake to verify their identity. This all happens p2p.
  • ta17711771 6y ago
    What happens on failure?
    • zumachase 6y ago
      A failure would indicate some sort of malicious actor, so the connection is logged and rejected.