Messenger systems compared by security, privacy, compatibility, and features

Re:Messenger systems compared by security, privacy, compatib... by jstanley on Tuesday October 16, 2018 @01:23PM (#18231236)

What does "E2E Audit" mean? Or, why does Ricochet have a "false"? The Ricochet codebase has been audited, if that's what it's supposed to mean.

[ Parent | on HN ]

Re:Messenger systems compared by security, privacy, compatib... by lvh on Tuesday October 16, 2018 @02:44PM (#18232030)

Since the author added a link to the Wire audit after I pointed out it existed, I think it means "third party has audited it and verified claims". On the other hand, they also still claim Telegram has been audited in this sense, which I have also pointed out and they have not resolved.

[ Parent | on HN ]

Re:Messenger systems compared by security, privacy, compatib... by jhammons on Tuesday October 16, 2018 @01:27PM (#18231262)

I think it means two parties can verify their public encryption keys with one another.

[ Parent | on HN ]

Re:Messenger systems compared by security, privacy, compatib... by jstanley on Tuesday October 16, 2018 @01:42PM (#18231432)

E.g. by comparing them in person? Ricochet can do that. The "Ricochet ID" is just a hash of the public key, so if you meet up in person and verify that you have added the correct ID for your counterparty, that sounds like you've verified the public keys, no?

[ Parent | on HN ]