Comment on Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

• Candice_the_elephant@lemmy.world ⁨1⁩ ⁨hour⁩ ago

  It only uses some of signal’s code. Not necessarily the OOTB key storage and security.

  source
• qyron@sopuli.xyz ⁨5⁩ ⁨hours⁩ ago

  How?

  source

  • HereIAm@lemmy.world ⁨5⁩ ⁨hours⁩ ago

    WhatsApp is using Signals protocol for communication: signal.org/blog/whatsapp-complete/

    I don’t fully understand what it entails, but from what I understand is that yes, WhatsApp is using the same encryption and message flow that signal uses, but you’re still using Meta’s app, and they can just read the plaintext message from there.

    source

    • qyron@sopuli.xyz ⁨5⁩ ⁨hours⁩ ago

      To my knowledge, under Signal, the encription keys are locally generated and stored, and the traffic flows between end points as a closed packet.

      This does not seem to be the case here, as the keys are generated and stored outside your equipment and, thus, are viable to be used by a third party to access packets.

      But I admit I speak heavily burdened by technical ignorance.

      source

      • kuhli@lemmy.dbzer0.com ⁨5⁩ ⁨hours⁩ ago

        My understanding is they’re sending a request to your device that then decrypts and uploads messages, not storing the keys outside your device.

        source
    • Candice_the_elephant@lemmy.world ⁨1⁩ ⁨hour⁩ ago

      Or they can make a copy of the encryption keys on creation. Using the code is very different than using the code unedited, or using all the code.

      source
  • Appoxo@lemmy.dbzer0.com ⁨5⁩ ⁨hours⁩ ago

    Unless proof is given, assume troll

    source