Re:WhatsApp's Signal Protocol integration is now complete
by wolf550e on Wednesday April 06, 2016 @01:25PM
(#11440217)
That appears to not fully interoperate with regular TLS implementations, and does not require the use of the most popular secure ciphersuite ECDHE_RSA_AESGCM. If they need to make changes to make it secure, define an extension and say this profile makes the extension mandatory (like MAC-then-encrypt), but don't just change the protocol.
Re:WhatsApp's Signal Protocol integration is now complete
by tptacek on Wednesday April 06, 2016 @10:46AM
(#11439088)
This is less a practical draft and more a political statement about the author's dislike for TLS 1.3. In particular, it makes extensive modifications to the TLS protocol itself (it doesn't merely propose a limited set of safe parameters).
The idea is more or less what you want, hardcode some known-good configuration for servers that can't or won't be upgraded every other month.