News for hackers. Stuff that matters.
Re:There is no WhatsApp 'backdoor' by true_religion on Friday January 13, 2017 @08:54PM (#13396360)
Do browsers tell you about certificate reissues by default?
Re:There is no WhatsApp 'backdoor' by garrettr_ on Friday January 13, 2017 @09:25PM (#13396492)
No, but they don't have to because (the vast majority of) users don't establish trust in website's TLS certificates themselves; instead, they use a trusted third party: the set of all trusted certificate authorities in their browser or operating system's root store. End-to-end encrypted messengers like Signal and WhatsApp don't rely on a trusted third party to establish trust, instead (rightly) leaving it up to users to establish trust between each other.