4 ms·
The clients are OSS. Does the protocol have any backdoor?
by awestroke 6y ago
The clients are OSS. Does the protocol have any backdoor?
- timpattinson 6y agoOSS /= no backdoors.
- ttsda 6y ago> Who cares if the server is not ? Well... if E2EE is properly implemented, you could be broadcasting your messages on twitter and you'd still be safe.
- lucideer 6y agoI can't speak to the iOS client but the Android one is only technically OSS in that it bundles proprietary binary blobs by default.
- arnoooooo 6y agoWho cares if the server is not ?
- sliken 6y agoThe protocol has a good reputation, problem is that you can't tell that the app is identical to the source, and each new update has the possibility of breaking things. Many people were angered by the recent update that forced users to have pins, which many didn't want. Doubly so since there's no recovery method. The pin issue highlights that future updates could make things less secure and/or add backdoors. Various legal efforts in various legal jurisdictions are trying to enforce backdoors and it remains to be seen if whisper systems will pull out of a jurisdiction if forced to compromise on security.
- schmorptron 6y ago"The protocol has a good reputation, problem is that you can't tell that the app is identical to the source" Don't they have reproducible builds?