Live data from Hacker News

Russia says it can collect encryption keys to decode information from WhatsApp

ibtimes.co.uk

1–10 of 30 posts

Re: Russia says it can collect encryption keys to decode information from WhatsApp

#2
Seems like to me this sort of bluff works on the average users and not the hardcore users who understand what they are doing, so it's entirely fruitless. Unless it's not a bluff, in which case we would wonder why the hell they announced it.

Re: Russia says it can collect encryption keys to decode information from WhatsApp

#5

Apparently they required companies to provide their private keys. Once you have that you can capture traffic and decrypt it.

Whatsapp, Signal, and Telegram generate the keys on the clients to provide end-to-end encryption.

The companies themselves do not have keys to provide to anyone.

Re: Russia says it can collect encryption keys to decode information from WhatsApp

#6
Many things mentioned in this article are not actually true. The publisher seems biased. Russian officials say different things. I think the most Russia will do in the nearest 5 years is the same as Kazakhstan's officials: force users to install special certificates if they use secured connection. And American and European govs likely have plans to do such things too. They have already copied a lot of laws about surveillance from China, Russia. etc.

Re: Russia says it can collect encryption keys to decode information from WhatsApp

#7
I think we need to wait for someone that understands Russian to chime in and tell us whether this article interpreted this correctly, or if this is just a law giving the state the authority to collect your private keys from your systems (via however they want to accomplish this)

Re: Russia says it can collect encryption keys to decode information from WhatsApp

#9
post #7

I think we need to wait for someone that understands Russian to chime in and tell us whether this article interpreted this correctly, or if this is just a law giving the state the authority to collect your private keys from your systems (via however they want to accomplish this)

The linked fsb.ru update says nothing about ability to collect encryption keys by themselves.

It only says that the method with which the companies will be able to give them the encryption keys is approved.

Still, my russian may be rusty, but it seems to me, the FSB just documented a procedure which the companies will need to follow to provide the FSB with the keys.

Post reply on HN