News for hackers. Stuff that matters.

A comment on EFail – Vulnerabilities in end-to-end encryption technologies OpenPGP and S/MIME. Parent comment

Re:EFail – Vulnerabilities in end-to-end encryption technolo... by smsm42 on Wednesday May 16, 2018 @03:20PM (#17085562)
That would be true if people routinely verified fingerprints of their contacts. I don't think it happens more often than any other commonly ignored security precautions. Also, what happens if the phone is lost/damaged/replaced with a newer model? I assume new key and thus new fingerprint?
[ Parent | on HN ]
Re:EFail – Vulnerabilities in end-to-end encryption technolo... by twr on Wednesday May 16, 2018 @04:43PM (#17086294)
Signal, WhatsApp, Matrix et al. show notifications when the participant’s device keys change. You’re right that most users don’t verify. The opportunity for detection or prevention of common forms of surveillance is better than none at all.
[ Parent | on HN ]