News for hackers. Stuff that matters.

A comment on WhatsApp Encryption Security Flaws Could Allow Snoops to Slide into Group Chats. Parent comment

Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by craftyguy on Wednesday January 10, 2018 @11:50AM (#16116495)
> Perhaps we'll see a good distributed peer to peer messaging protocol at some point in the future.

The Matrix protocol is actually fairly promising, as long as you only use it for Matrix<->Matrix communication. Things fall to pieces when you try to bridge it with IRC.

It's certainly more user-friendly for non-tech. folks than, say, the awkward key exchange/setups of XMPP clients, but it's still a far cry from something like Signal in terms of 'ease of use'

[ Parent | on HN ]
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by Shoothe on Wednesday January 10, 2018 @01:28PM (#16117499)
> awkward key exchange/setups of XMPP clients

What do you mean by that? Conversations.im establishes e2e secure session without any fingerprint approving interaction whatsoever. Of course you can manually scan barcodes for paranoid mode but that's not necessary.

For me it's a perfect balance between convenience and security. Read more at https://gultsch.de/trust.html

[ Parent | on HN ]
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by craftyguy on Wednesday January 10, 2018 @05:59PM (#16119949)
Hmm, I'll check this out, thanks.

I was mainly speaking to previous experiences trying to set up Conversations on one device, Pidgin on another, there not being any good way to use a consistent key for my user on both, and trying to walk non-technical family members through that fiasco. This was about 2 years ago, maybe the situation has improved!

[ Parent | on HN ]
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by Shoothe on Thursday January 11, 2018 @05:05AM (#16122651)
Keep in mind that Pidgin supporting many protocols means "lowest common denominator" in several cases. For OMEMO E2E I'd recommend Gajim or (still in alpha but promising) dino.im
[ Parent | on HN ]
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by upofadown on Wednesday January 10, 2018 @07:47PM (#16120536)
You can check on the progress of Omemo support for the various XMPP clients here:

* https://omemo.top/

[ Parent | on HN ]
Re:WhatsApp Encryption Security Flaws Could Allow Snoops to ... by upofadown on Wednesday January 10, 2018 @03:37PM (#16118821)
Doesn't matrix do everything through federated servers?
[ Parent | on HN ]