4 ms·
"Nobody, not even us, can read or listen into your conversations." This cannot possibly be true, given they are the root of trust for establishing the recipien
by ctz 12y ago
"Nobody, not even us, can read or listen into your conversations."
This cannot possibly be true, given they are the root of trust for establishing the recipient's authentic public key.
Also, minified javascript really does not count as a source code release.
- jtheory 12y agoQuite right. If they were compelled -- e.g., "insert this backdoor or we'll imprison you" -- they might trivially serve up a tweaked version of their JavaScript to the one user the NSA was interested in. And it wouldn't take a complicated tweak at all to sneak the real password (or some sufficient version of it) back to the server, after which point certainly "even us" can read & listen in to all of that user's conversations.
- danielweber 12y ago(Comment moved to today's topic.)