3 ms·
You can’t verify the binaries it’s actually running and the protocol shouldn’t rely on a trustworthy server anyway. IMO the biggest problem with any of these E
by dustyharddrive 4y ago
You can’t verify the binaries it’s actually running and the protocol shouldn’t rely on a trustworthy server anyway.
IMO the biggest problem with any of these E2EE apps is using them with iOS users. Apple makes it impossible to extract and inspect the packages without jailbreaking, so most projects don’t bother with reproducible iOS builds.
- tptacek 4y agoAs the paper demonstrates, you did in fact need to trust the Threema server in some respects.
- dustyharddrive 4y agoYeah :( but that’s why I said “shouldn’t” instead of “doesn’t”.