3 ms·

Thanks for the heads up regarding the undocumented XMPP extension! I'm sure Google chat already maintains plenty of additional signatures, checksums, etc. that

by j_s 13y ago

Thanks for the heads up regarding the undocumented XMPP extension! I'm sure Google chat already maintains plenty of additional signatures, checksums, etc. that stay entirely server-side; any of which would be more than sufficient to 'prove[...] cryptographically that your account sent that message' should law enforcement need to 'verify the signature is correct'.

robryk 13y ago
The point here is that those stay server-side and are thrown away together with the messages when they get deleted. Whatever's sent to the client can be stored by him/her indefinitely. BTW. There is probably a time limit: if this is really a MAC, then the key used to generate it is most likely rotated once in a while.