3 ms·

They are talking about public keys though. They just removed the part about not having access to private keys. Omission of the line doesn't actually mean that

They are talking about public keys though. They just removed the part about not having access to private keys. Omission of the line doesn't actually mean that they now have access to private keys as well.

LockAndLol 6y ago
It doesn't mean they don't either. It's the removal of the previous claim that's worrying. But honestly, it doesn't matter anyway since Whatsapp is somehow able to backup all your data on Google Drive and restore it on separate phones. How are they able to do that without backing up the private key? https://faq.whatsapp.com/android/chats/how-to-restore-your-chat-history/?lang=en https://faq.whatsapp.com/android/chats/how-to-restore-your-c...
- SahAssar 6y ago
  I thought the backups were unencrypted (or encrypted with a key that was specific to backups) for that exact purpose.
- AkshitGarg 6y ago
  The backups are unencrypted as highlighted in the UI (if I recall correctly). They re-generate the keys when you switch phones / re-install / clear data. That's when you get to see the "XYZ's security code changed" service message
  - LockAndLol 6y ago
    I guess it makes sense. Doesn't make a difference if you deliver the chest with the key to the lock or the chest without the lock. > For example, if you use a data backup service integrated with our Services (like iCloud or Google Drive), they will receive information you share with them, such as your WhatsApp messages. https://www.whatsapp.com/legal/updates/privacy-policy/?lang=en https://www.whatsapp.com/legal/updates/privacy-policy/?lang=... Looks like you're right, it must be unencrypted.
lukashed 6y ago
I'm not sure if the title of this post changed, but now it only says "might have access" which is not untrue
_Understated_ 6y ago
Why would they remove such an important line? I'm not sure they deserve the benefit of the doubt. Facebook has shown themselves to be dodgy as hell when it comes to our privacy. I would prefer them to explicitly state that they don't have access to the private keys.

LockAndLol 6y ago

It doesn't mean they don't either. It's the removal of the previous claim that's worrying. But honestly, it doesn't matter anyway since Whatsapp is somehow able to backup all your data on Google Drive and restore it on separate phones. How are they able to do that without backing up the private key? https://faq.whatsapp.com/android/chats/how-to-restore-your-chat-history/?lang=en https://faq.whatsapp.com/android/chats/how-to-restore-your-c...

SahAssar 6y ago
I thought the backups were unencrypted (or encrypted with a key that was specific to backups) for that exact purpose.
AkshitGarg 6y ago
The backups are unencrypted as highlighted in the UI (if I recall correctly). They re-generate the keys when you switch phones / re-install / clear data. That's when you get to see the "XYZ's security code changed" service message
- LockAndLol 6y ago
  I guess it makes sense. Doesn't make a difference if you deliver the chest with the key to the lock or the chest without the lock. > For example, if you use a data backup service integrated with our Services (like iCloud or Google Drive), they will receive information you share with them, such as your WhatsApp messages. https://www.whatsapp.com/legal/updates/privacy-policy/?lang=en https://www.whatsapp.com/legal/updates/privacy-policy/?lang=... Looks like you're right, it must be unencrypted.

lukashed 6y ago

I'm not sure if the title of this post changed, but now it only says "might have access" which is not untrue

_Understated_ 6y ago

Why would they remove such an important line? I'm not sure they deserve the benefit of the doubt. Facebook has shown themselves to be dodgy as hell when it comes to our privacy. I would prefer them to explicitly state that they don't have access to the private keys.