3 ms·
Remember when Zoom claimed that meetings were E2EE yet you could join the meeting by phone and no one batted an eye for at least one or two years? Noticed how n
by mr_mitm 4y ago
Remember when Zoom claimed that meetings were E2EE yet you could join the meeting by phone and no one batted an eye for at least one or two years? Noticed how no regular person cares when the "security code" of a chat partner changes in WhatsApp or Signal? Not to mention no regular person uses self-compiled apps for that, even if it were possible. E2EE is close to becoming a cargo cult, because done properly key management and identity verification are a usability nightmare. It will always remain a toy for a niche audience. Most people just don't care, and the non-technical people that do care are happy with a green lock appearing somewhere. I do hope to be proven wrong, though.
- twstdzppr 4y agoSo what you're saying is, we can just put a green lock in the UI and call it a day.
- rini17 4y agoWe can put some thought into how to set up the third parties to be trusted with our keys. Curretly it's very haphazard. And it's not avoidable. Even Phil Zimmerman, inventor of PGP, won't accept PGP encrypted mail because he claims to have lost his private key. The outrage "own your private keys or bust!" is much easier tho.
- sleepless 4y agoDo you happen to know which OS Phil was using, when he lost his private key and what the exact circumstances were? This is a nice story to be told, but without details it is not worth that much.
- rini17 4y agoWhy does it matter? Private keys are being compromised or lost under all kinds of circumstances and regardless of the OS.
- twstdzppr 4y agoGreen lock it is.
- Genghis_9000 4y ago
- matheusmoreira 4y agoCargo cult? No. It's not perfect but end-to-end encryption is demonstrably better than whatever we had before. WhatsApp encryption is the same as Signal's and it has already defeated police and courts here. Some judges got so pissed off they ordered WhatsApp to be blocked nation-wide. We don't live in a perfect world. I'm glad that everyone I talk to is using something this secure by default.
- FullyFunctional 4y agoIMhO, one company tacled that very problem head on and did a fantastic job and it's my by far prefered chat (+ more) app today. Ironically, that company, https://keybase.io https://keybase.io, got acquired by Zoom. Keybase still works today (thankfully), but there are AFAIK no guarantees for how long. Keybase Chat is fully encrypted, persistent, and cross platform, and has the best solution to the identity problem.
- DreamFlasher 4y agoThis. Would love to see Matrix, Signal and others adopting/directly using keybase.