Should you not also trust your device hardware, it’s os and the market you got the app from?
Comment on Lawsuit Alleges That WhatsApp Has No End-to-End Encryption
Maestro@fedia.io 3 weeks agoWith e2e you don't need to trust the servers. You only need to trust the client that does the encryption.
pressanykeynow@lemmy.world 3 weeks ago
Maestro@fedia.io 3 weeks ago
That's a given I think. If you can't trust the OS then you can't trust the client.
RIotingPacifist@lemmy.world 3 weeks ago
The attack as described almost certainly involves the server sending a message to your client and then having the messages replicated via a side channel to Whatsapp without breaking E2E encryption.
But yes the point is you can’t trust the clients.
If you could run Whatsapp without connecting to Meta, you would be safe from this attack, but as you’ve pointed out a secure client is a better solution.