News for hackers. Stuff that matters.
Re:WhatsApp's Signal Protocol integration is now complete by baby on Tuesday April 05, 2016 @04:40PM (#11434197)
> It's easy to shoot yourself in the foot with TLS

I would argue it's easier to shoot yourself in the face trying to re-implement/re-design something like TLS.

Re:WhatsApp's Signal Protocol integration is now complete by rakoo on Wednesday April 06, 2016 @08:32AM (#11438298)
The mind behind Noise (Trevor Perrin) is one of the minds behind Axolotl (actually Noise can be seen as a generalization of the Axolotl's cross-signing of DH keys, see this post: https://whispersystems.org/blog/simplifying-otr-deniability/) so I would likely be comfortable with it. Although it is completely true that it's been far less used and studied than TLS.
Re:WhatsApp's Signal Protocol integration is now complete by quotemstr on Wednesday April 06, 2016 @04:29AM (#11437454)
The OP's point is that it is like TLS, except with a novelty effect. Personally, I prefer that everyone standardize than use a hundred different crypto protocols, none of which receives adequate scrutiny. TLS1.3, with encrypt-then-MAC and zero-RTT setup, can't get here fast enough.