4 ms·
I doubt it is that hard to implement. They can set up some sort of key sharing between the mobile and desktop client. Then the desktop client becomes a full-fle
by perryizgr8 6y ago
I doubt it is that hard to implement. They can set up some sort of key sharing between the mobile and desktop client. Then the desktop client becomes a full-fledged participant. Ask the user to hold the phone screen in front of the webcam and show a QR code with the private key.
They do have group video calls with e2e on mobile, no reason they can't do it on desktop/tablet.
- londons_explore 6y agoAlice has a malicious Chrome extension which steals cookies and secret keys... Now all of her messages, and chat messages from her friends, and groups she's part of, have all messages intercepted, and all historic messages leaked. Video chat is expected to be emphererial by users, and having a malicious chrome extensions steal it breaks those expectations. It's hard because desktop as a platform has far fewer security guarantees, and a user isn't just putting their own data at risk, but that of their friends and contacts too. Facebook has been burned by pretty much the same with Cambridge Analytica.
- perryizgr8 6y agoI don't buy this argument. By that logic all of internet banking should also disable web/desktop access? Zoom, skype and google meet should also stop working on the desktop/web, and only allow users through their mobile apps. Yeah desktop is inherently less secure because of the freedoms it affords users, but that doesn't prevent Facebook from operating their website.
- simonh 6y agoThey don’t even have an iPad app. Clearly they’re just not interested in trying. If a browser interface isn’t secure, do a native client, or even an Electron app. WeChat has native Windows and Mac apps.