Re:Is Facebook eavesdropping on phone conversations?
by r00fus on Wednesday May 25, 2016 @01:59PM
(#11771748)
Couldn't it be a secondary stream to the same endpoint but using a different keying (ie, encryption with server's pubkey) mechanism (the metadata then wouldn't be E2E encrypted, but that's not covered in WhatsApp's E2E security page)?
However, a secondary stream from the app to a different endpoint would be detectable, so there are other practical challenges to the GP's scenario.
[1] https://www.usenix.org/event/usenix10/tech/full_papers/Carro...