“Someone was typing in a URL and WhatsApp was fetching it off my server”

Re:“Someone was typing in a URL and WhatsApp was fetching it... by hakcermani on Wednesday June 14, 2017 @04:15PM (#14555750)

One aspect is the lack of debounce, but also revealing the endusers ip and user agent. They could proxy external link requests via whatsapp servers without breaking end to end encryption. wonder what iMessage does ?!

[ Parent | on HN ]

Re:“Someone was typing in a URL and WhatsApp was fetching it... by mobilethrow on Wednesday June 14, 2017 @04:28PM (#14555864)

> They could proxy external link requests via whatsapp servers without breaking end to end encryption.

What good is E2E if you are going to send the plaintext home anyway? Doing these requests on the device is stupid, but proxying them through FB servers would border on malicious.

[ Parent | on HN ]

Re:“Someone was typing in a URL and WhatsApp was fetching it... by nkassis on Wednesday June 14, 2017 @04:21PM (#14555801)

Could you explain how that would work? Right now they seem to be doing it client side thus not ever seeing the URL themselves. If they were to have a proxy said proxy would need to know the URL to fetch. Is there some alternative solution?

[ Parent | on HN ]