WhatsApp's Signal Protocol integration is now complete

Re:WhatsApp's Signal Protocol integration is now complete by envy2 on Tuesday April 05, 2016 @12:05PM (#11431537)

> 2) It's a shame to see key words be killed off by internationalisation concerns. 12 words seems so much more friendly, at least to English speakers, than a 50 digit number. In practice I doubt any non-trivial numbers of people will ever compare codes by reading out such a number. I hope further research here can develop better replacements for encoding short binary strings in i18n friendly ways (perhaps with icons instead of specific words? if you don't speak a common language with your chat partner then the app is useless anyway).

There's a QR code representation as well that can be scanned to verify.

[ Parent | on HN ]

Re:WhatsApp's Signal Protocol integration is now complete by drdaeman on Tuesday April 05, 2016 @05:25PM (#11434632)

A wild idea: a string of distinctive emojis (distinctive: I mean, not allowing emojis that are too close, like too similar face expressions where only smaller details differ)

They're unified, they're mostly language-agnostic, and there is shitload of them so the representation would be much more compact than hexadecimal or base64-encoded string.

[ Parent | on HN ]

Re:WhatsApp's Signal Protocol integration is now complete by jsmthrowaway on Tuesday April 05, 2016 @05:42PM (#11434761)

Cryptography software built with emojis would probably the final straw to me burning down my career, destroying every computing device I own, buying a shrimp boat, and living out my days at sea with a Lieutenant Dan stand-in by my side, wistfully remembering the good times when the computing world made sense as Bud Light finds its way down my jaded, cynical throat.

Put it on a .io domain for bonus points.

[ Parent | on HN ]

Re:WhatsApp's Signal Protocol integration is now complete by drdaeman on Tuesday April 05, 2016 @08:08PM (#11435642)

Hey, hey, if that nonsense would appear in my XMPP client I'd really feel the urge do to the same. But aren't we're talking about modern popular messaging apps here?

If those only'd be international, I'd seriously propose key fingerprints based on animated meme-filled "gifs". Because that's what the common audience understands (or at least my impression is so). Not some weird-looking strings of meaningless digits and letters.

[ Parent | on HN ]

Re:WhatsApp's Signal Protocol integration is now complete by jszymborski on Tuesday April 05, 2016 @12:54PM (#11432059)

I feel like there are a lot of security issues with QR code representations, namely that the information are even less transparent than hexadecimal fingerprints, and therefore are not really a fail-safe to MITM attacks.

[ Parent | on HN ]

Re:WhatsApp's Signal Protocol integration is now complete by kevincox on Tuesday April 05, 2016 @03:00PM (#11433318)

I'm not sure about this. If they can change what QR code you are seeing they can change the words as well.

[ Parent | on HN ]