Re:Jan Koum: “I couldn't agree more with everything [Apple] ...
by simoncion on Thursday February 18, 2016 @06:13PM
(#11130145)
> You contradict with your previous statement that Signal does not provide OOB key verification...
I do no such thing because I never made such a statement. I addressed your claim about mandatory OOB key exchange, not optional verification. To jog your memory, the two times I brought up OOB exchange were as follows:
>> Last time I checked whats app didn't require any kind of OOB key exchange, or ability to set your own password.
> Neither does Signal/TextSecure. Signal most definitely has E2E encryption. [0]
and
> Signal neither requires OOB key exchange, nor does it require that you set a password to encrypt Signal data while on disk. [1]
Notice that I talk about how Signal doesn't require OOB key exchange, not that Signal doesn't provide OOB key verification.
I do no such thing because I never made such a statement. I addressed your claim about mandatory OOB key exchange, not optional verification. To jog your memory, the two times I brought up OOB exchange were as follows:
>> Last time I checked whats app didn't require any kind of OOB key exchange, or ability to set your own password.
> Neither does Signal/TextSecure. Signal most definitely has E2E encryption. [0]
and
> Signal neither requires OOB key exchange, nor does it require that you set a password to encrypt Signal data while on disk. [1]
Notice that I talk about how Signal doesn't require OOB key exchange, not that Signal doesn't provide OOB key verification.
[0] https://news.ycombinator.com/item?id=11124807
[1] https://news.ycombinator.com/item?id=11125534