News for hackers. Stuff that matters.

A comment on Facebook Messenger begins testing end-to-end encryption using Signal Protocol. Parent comment

Re:Facebook Messenger begins testing end-to-end encryption u... by tptacek on Friday July 08, 2016 @11:46AM (#12056321)
One would hope that the founder of the company trying to bring that weird secure caching attempt to market would believe that it wasn't very complicated. :)

Of course, if you've filed for patents on this, as was suggested upthread, that somewhat cuts against that argument, doesn't it?

[ Parent | on HN ]
Re:Facebook Messenger begins testing end-to-end encryption u... by buu700 on Friday July 08, 2016 @11:57AM (#12056427)
lol, I'm definitely biased given that I'm long since familiar with the idea and wrote the implementation, but I think it's more conceptually counterintuitive/clever/weird than it is actually complicated in terms of having many moving parts.

WebSign does have a patent pending on it (I think it's fair enough to say that the whole system of accomplishing in-browser code signing this way was non-obvious), but HPKP Suicide itself doesn't. Bryant (eganist) and I are actually disclosing and open sourcing implementations of a few non-code-signing applications of HPKP Suicide at Black Hat and DEF CON next month.

[ Parent | on HN ]
Re:Facebook Messenger begins testing end-to-end encryption u... by cyphar on Saturday July 09, 2016 @09:36AM (#12061255)
> WebSign does have a patent pending on it (I think it's fair enough to say that the whole system of accomplishing in-browser code signing this way was non-obvious),

Yay, another technology to boycott entirely.

[ Parent | on HN ]