4 ms·

I've been using WhatsApp on Android lately since I thought they partnered with TextSecure and were encrypting recent Android <-> Android messages behind the sce

I've been using WhatsApp on Android lately since I thought they partnered with TextSecure and were encrypting recent Android <-> Android messages behind the scenes. Is this not the case? My impression was that WhatsApp was the most private/secure text messaging app at the moment, but this is making it seem like maybe it's not.

mtmail 12y ago
Then the PR worked. The partnership was announced but the encryption isn't enabled yet.
- losvedir 12y ago
  I don't think that's correct. I was going off of WhisperSystem's announcement[0] where they say: "Your messages may already be encrypted. The most recent WhatsApp Android client release includes support for the TextSecure encryption protocol, and billions of encrypted messages are being exchanged daily." [0] https://whispersystems.org/blog/whatsapp/ https://whispersystems.org/blog/whatsapp/
  - spdustin 12y ago
    It's not clear to me at all from that quote - I want to know that my communication is encrypted end-to-end, not that it may be encrypted. The rest of their statement is marketing speak. (Not negative toward you, of course; you're just quoting)
- WhisperSystems 12y ago
  Not exactly. Currently (2015-02-09), end-to-end encryption aka protocol 2.0 is enabled between android clients using the latest version. Note: only message contents are e2e encrypted, metadata remains accessible to WhatsApp servers. Other clients (iOS etc) still use the old WhatsApp protocol, for now.
  - moxie 12y ago
    This 'WhisperSystems' account is not controlled by anyone associated with the Open Whisper Systems project. Whoever this is, please stop claiming to represent us.
TsiCClawOfLight 12y ago
WhatsApp is one of the least private and least secure apps at the moment. If you want security, you should use ChatSecure or Threema, which are properly encrypted.
xnyhps 12y ago
This has nothing to do with e2e encryption, this is only the metadata of your profile, status and when you are online. I thought it was pretty well known by now that WA shares that info of you with everyone who has your phone number. The content may be encrypted, but it is anything but private.

mtmail 12y ago

Then the PR worked. The partnership was announced but the encryption isn't enabled yet.

losvedir 12y ago
I don't think that's correct. I was going off of WhisperSystem's announcement[0] where they say: "Your messages may already be encrypted. The most recent WhatsApp Android client release includes support for the TextSecure encryption protocol, and billions of encrypted messages are being exchanged daily." [0] https://whispersystems.org/blog/whatsapp/ https://whispersystems.org/blog/whatsapp/
- spdustin 12y ago
  It's not clear to me at all from that quote - I want to know that my communication is encrypted end-to-end, not that it may be encrypted. The rest of their statement is marketing speak. (Not negative toward you, of course; you're just quoting)
WhisperSystems 12y ago
Not exactly. Currently (2015-02-09), end-to-end encryption aka protocol 2.0 is enabled between android clients using the latest version. Note: only message contents are e2e encrypted, metadata remains accessible to WhatsApp servers. Other clients (iOS etc) still use the old WhatsApp protocol, for now.
- moxie 12y ago
  This 'WhisperSystems' account is not controlled by anyone associated with the Open Whisper Systems project. Whoever this is, please stop claiming to represent us.

TsiCClawOfLight 12y ago

WhatsApp is one of the least private and least secure apps at the moment. If you want security, you should use ChatSecure or Threema, which are properly encrypted.

xnyhps 12y ago

This has nothing to do with e2e encryption, this is only the metadata of your profile, status and when you are online. I thought it was pretty well known by now that WA shares that info of you with everyone who has your phone number. The content may be encrypted, but it is anything but private.