21–30 of 65 posts
>And that’s true on any phone that runs the app, from iPhones to Android phones to Windows phones to old school Nokia flip phones. Woo! Props to the WhatsApp team for supporting these features for dumbphone users like me. Does anyone know if/how/where you can verify a users fingerprint?
>And that’s true on any phone that runs the app, from iPhones to Android phones to Windows phones to old school Nokia flip phones. Woo! Props to the WhatsApp team for supporting these features for dumbphone users like me. Does anyone know if/how/where you can verify a users fingerprint?
At least on smartphones yes, you can (by tapping on persons name during chat, and then selecting "Encryption").
>And that’s true on any phone that runs the app, from iPhones to Android phones to Windows phones to old school Nokia flip phones. Woo! Props to the WhatsApp team for supporting these features for dumbphone users like me. Does anyone know if/how/where you can verify a users fingerprint?
At least on smartphones yes, you can (by tapping on persons name during chat, and then selecting "Encryption").
The article says: "With end-to-end encryption in place, not even WhatsApp’s employees can read the data that’s sent across its network." But according to the diagram: http://www.wired.com/wp-content/uploads/2016/04/Whatsapp_Enc... ... A's message is encrypted with Whatsapp's public key, which means that Whatsapp's private key can (and has to) decrypt it on the server side to encrypt it in turn with B's public key. If…
With PKI the ability of the user to verify that they received and used the correct public key is critical and while I have to admit that I haven't read that much about WhatsApp's E2EE setup I haven't seen anything that shows how this issue can be mitigated in a way that would be useful for most users.
My question is, how can this be verified?
[1] https://www.whatsapp.com/security/WhatsApp-Security-Whitepap...
>“The encryption genie is out of the bottle” ... > There was a middle period where the government had a broad ability to surveil, but if you look at human history in total, people evolved and civilizations evolved with private conversations and private speech. If anything, we’re bringing that back to individuals. I think on the contrary, the surveillance demon is out of the bottle. It's impossible to hide metadata (i…
The article says: "With end-to-end encryption in place, not even WhatsApp’s employees can read the data that’s sent across its network." But according to the diagram: http://www.wired.com/wp-content/uploads/2016/04/Whatsapp_Enc... ... A's message is encrypted with Whatsapp's public key, which means that Whatsapp's private key can (and has to) decrypt it on the server side to encrypt it in turn with B's public key. If…
Why are people downvoting this? While the "public key" is not "WhatsApp's" it is served from their server hence in theory they can provide you with any public key they want, decrypt the message, store it, and re-encrypt it with the "correct" private key and send it off to the user. With PKI the ability of the user to verify that they received and used the correct public key is critical and while I have to admit that…
> The encryption genie is out of the bottle > There was a middle period where the government had a broad ability to surveil, but if you look at human history in total, people evolved and civilizations evolved with private conversations and private speech. If anything, we’re bringing that back to individuals. I think on the contrary, the surveillance demon is out of the bottle. It's too hard to hide metadata such as i…
I gave a talk about such conversational languages [1] at ClojureD last month if you're interested...
My question is, how can this be verified?
They have released a whitepaper [1] where they go into details of how the encryption works, so using this knowledge in theory one should be able to verify that the encryption is legitimate. [1] https://www.whatsapp.com/security/WhatsApp-Security-Whitepap...