• @tsonfeir
      link
      English
      05 months ago

      Do you believe everything you hear a company say who has proven themselves to be untrustworthy?

      End to end doesn’t necessarily mean that the middle can’t read it, it just means strangers listening can’t read it. WhatsApp isn’t open source, and auditing that encryption on a binary level would prove difficult.

      As we have seen, companies can also bow to the wills of governments, and if enough pressure is applied they often agree to backdoors.

      If it’s not open source, it’s a scam.

      • @Kusimulkku
        link
        English
        15 months ago

        End to end doesn’t necessarily mean that the middle can’t read it, it just means strangers listening can’t read it.

        I thought it meant nobody between the two ends can read it.

        • @tsonfeir
          link
          English
          1
          edit-2
          5 months ago

          End->(public network)->WhatsApp->(public network)->End

          So, no stranger can read it.

          The key word is stranger. WhatsApp made the encryption you’re using and could (and I’m sure does) have the ability to decrypt it.

          True end to end is where you and your partner have keys and you both encrypt on the client side, and don’t tell the middle man. That way no malicious intent from the server could ever decrypt the actual message.

          • @Kusimulkku
            link
            English
            05 months ago

            True end to end is where you and your partner have keys and you both encrypt on the client side, and don’t tell the middle man. That way no malicious intent from the server could ever decrypt the actual message.

            That’s how the Signal protocol they’re using is working

            • @tsonfeir
              link
              English
              15 months ago

              WhatsApp is not peer to peer.

                • @tsonfeir
                  link
                  English
                  15 months ago

                  What is it you thought they were saying?

                  • @Kusimulkku
                    link
                    English
                    15 months ago

                    You seem confused. E2EE doesn’t mean peer-to-peer. Signal protocol isn’t peer-to-peer. You don’t need to be peer-to-peer to have secure communication because E2EE makes it so that the server can’t read what the two ends are writing.

              • @tsonfeir
                link
                English
                15 months ago

                If they are, they’ve probably modified it.