Or they can make a copy of the encryption keys on creation. Using the code is very different than using the code unedited, or using all the code.
Comment on Lawsuit Alleges That WhatsApp Has No End-to-End Encryption
HereIAm@lemmy.world 10 hours agoWhatsApp is using Signals protocol for communication: signal.org/blog/whatsapp-complete/
I don’t fully understand what it entails, but from what I understand is that yes, WhatsApp is using the same encryption and message flow that signal uses, but you’re still using Meta’s app, and they can just read the plaintext message from there.
Candice_the_elephant@lemmy.world 6 hours ago
qyron@sopuli.xyz 10 hours ago
To my knowledge, under Signal, the encription keys are locally generated and stored, and the traffic flows between end points as a closed packet.
This does not seem to be the case here, as the keys are generated and stored outside your equipment and, thus, are viable to be used by a third party to access packets.
But I admit I speak heavily burdened by technical ignorance.
kuhli@lemmy.dbzer0.com 10 hours ago
My understanding is they’re sending a request to your device that then decrypts and uploads messages, not storing the keys outside your device.