2 ms·
Does anybody know how the trust model for this looks like? Is it trust on first use together with a notification if a contact's key changes, a centralized key s
by lxgr 2y ago
Does anybody know how the trust model for this looks like? Is it trust on first use together with a notification if a contact's key changes, a centralized key server (if so, who runs it, and is there key transparency), or just opportunistic encryption not protected against active attackers in the middle?
- jeroenhd 2y agoIt's using MLS for encryption and key exchange, which is based in part in Signal's encryption. I believe they'll probably be using TOFU like all the other popular encrypted messenger apps. Google's messenger (the encryption of which already uses MLS) has a verification feature where you can match key fingerprints by comparing numbers, but who knows how Apple will implement this.