4 ms·
People think end to end encryption is a magic cure for OpSec. It’s not. All end to end encryption does is protect you from eve spying on conversations between
by josh2600 6y ago
People think end to end encryption is a magic cure for OpSec. It’s not.
All end to end encryption does is protect you from eve spying on conversations between Alice and bob. Nothing prevents Bob from doxing/publishing all of Alice’s messages.
Edit: it’s true that the signal protocol provides deniability for messages but if Bob publishes Alice’s messages and whatsapp can prove that bob sent and Alice received messages that match those time stamps...
This is why signal deleting logs matters.
- devit 6y agoIt's impossible to prevent Bob from publishing all Alice's messages (barring tech that can forcibly erase them from Bob's brain). The best you can do is not make it possible for Bob to prove that the messages were not forged (however, this is not necessarily a good thing, and in fact the opposite can often be better).
- makeworld 6y agoE2EE is for communicating with a trusted person without third parties listening in through technological means. Anything else is out of scope. This includes what you mention here, where the person you're communicating with isn't actually trusted.