4 ms·

A TD:DR; for people. The "WhatsApp Encryption Overview" technical whitepaper [1] had the following text removed between revisions: "At no time does the WhatsA

A TD:DR; for people. The "WhatsApp Encryption Overview" technical whitepaper [1] had the following text removed between revisions: "At no time does the WhatsApp server have access to any of the client's private keys." [1] https://scontent.whatsapp.net/v/t39.8562-34/122249142_469857720642275_2152527586907531259_n.pdf/WA_Security_WhitePaper.pdf?ccb=2&_nc_sid=2fbf2a&_nc_ohc=U4i2jUSaMEwAX-hPQRz&_nc_ht=scontent.whatsapp.net&oh=9c7d28c9e915eed519735042d2aa688b&oe=601F0119 https://scontent.whatsapp.net/v/t39.8562-34/122249142_469857...

LockAndLol 6y ago
Would you have a link to the previous version?
- programbreeding 6y ago
  This website seems to have version 2 which includes that text on page 11. You can scroll down and read it without downloading it. https://www.academia.edu/36044237/WhatsApp_Encryption_Overview?auto=download https://www.academia.edu/36044237/WhatsApp_Encryption_Overvi...
- ffpip 6y ago
  https://files.catbox.moe/fopl6w.pdf https://files.catbox.moe/fopl6w.pdf A copy I had downloaded on 29 July 2020
  - ignoramous 6y ago
    Thanks. Archived: https://archive.is/FenEt https://archive.is/FenEt
luto 6y ago
Instead, they added the following on page 13: > The WhatsApp server has no access to the client’s private keys, (...)
- jjoonathan 6y ago
  We delete them right after we mirror them to the NSA through our ultra-security SolarWinds box, promise!
- jonshariat 6y ago
  Good point. Here is the full text >All chats use the same Signal protocol outlined in this whitepaper, regardless of their end-to-end encryption status. The WhatsApp server has no access to the client’s private keys, though if a business user delegates operation of their Business API client to a vendor, that vendor will have access to their private keys - including if that vendor is Facebook. Not sure if the facebook exception was there in the previous version.
  - zadokshi 6y ago
    > “The _WhatsApp_ server has no access to the client’s private keys” This is craftily ambiguous.
    - pindab0ter 6y ago
      Craftily specific, more like.
    - mastermojo 6y ago
      The Facebook server does 0=)
deleted 6y ago
[deleted]

LockAndLol 6y ago

Would you have a link to the previous version?

programbreeding 6y ago
This website seems to have version 2 which includes that text on page 11. You can scroll down and read it without downloading it. https://www.academia.edu/36044237/WhatsApp_Encryption_Overview?auto=download https://www.academia.edu/36044237/WhatsApp_Encryption_Overvi...
ffpip 6y ago
https://files.catbox.moe/fopl6w.pdf https://files.catbox.moe/fopl6w.pdf A copy I had downloaded on 29 July 2020
- ignoramous 6y ago
  Thanks. Archived: https://archive.is/FenEt https://archive.is/FenEt

luto 6y ago

Instead, they added the following on page 13: > The WhatsApp server has no access to the client’s private keys, (...)

jjoonathan 6y ago
We delete them right after we mirror them to the NSA through our ultra-security SolarWinds box, promise!
jonshariat 6y ago
Good point. Here is the full text >All chats use the same Signal protocol outlined in this whitepaper, regardless of their end-to-end encryption status. The WhatsApp server has no access to the client’s private keys, though if a business user delegates operation of their Business API client to a vendor, that vendor will have access to their private keys - including if that vendor is Facebook. Not sure if the facebook exception was there in the previous version.
- zadokshi 6y ago
  > “The _WhatsApp_ server has no access to the client’s private keys” This is craftily ambiguous.
  - pindab0ter 6y ago
    Craftily specific, more like.
  - mastermojo 6y ago
    The Facebook server does 0=)

deleted 6y ago

[deleted]