3 ms·
Is there evidence that WhatsApp is MITMable? I assumed it's not because it claims to be E2E, when I checked the fingerprint of a contract it looked good and re
by X6S1x6Okd1st 6y ago
Is there evidence that WhatsApp is MITMable?
I assumed it's not because it claims to be E2E, when I checked the fingerprint of a contract it looked good and reports are that the taliban uses it for internal comms
https://www.nytimes.com/2019/10/26/world/asia/afghanistan-whatsapp-taliban.html https://www.nytimes.com/2019/10/26/world/asia/afghanistan-wh...
- bigphishy 6y agoNo there is no evidence that the encryption keys have been modified. If the fingerprints match, then messages are not being intercepted and cannot be with today's technology. However, the code is closed, perhaps it is only displaying a similar thumbprint, and hiding the real thumbprint from the user. As far as I know, the code to whatsapp is closed.
- X6S1x6Okd1st 6y agoIt's certainly closed source, but their E2E protocol is laid out in their white paper. You can determine if a given version of the app is conforming to the protocol or not at some point in time. After a short search I was able to find this attempt: https://www.delaat.net/rp/2018-2019/p25/report.pdf https://www.delaat.net/rp/2018-2019/p25/report.pdf Which was inconclusive.