Why is no one signing their emails?

Re:Why is no one signing their emails? by oarsinsync on Wednesday March 13, 2019 @12:37PM (#19380422)

None of that ensures you have message privacy. If you haven't verified the key, you have no assurance that the connection hasn't been MITM'd.

[ Parent | on HN ]

Re:Why is no one signing their emails? by lokedhs on Thursday March 14, 2019 @04:37AM (#19387437)

What's worse is that Whatsapp doesn't tell you if they changed the key, so there is no protection against MITM.

[ Parent | on HN ]

Re:Why is no one signing their emails? by oarsinsync on Friday March 15, 2019 @07:43AM (#19398725)

You need to enable security notifications, and you will be notified of key changes.

> Turn on this setting to receive notifications when a contact's security code has changed. Your messages and calls are encrypted regardless of this setting.

[ Parent | on HN ]

Re:Why is no one signing their emails? by jjeaff on Thursday March 14, 2019 @05:01AM (#19387533)

WhatsApp used to. Did they stop?

[ Parent | on HN ]

Re:Why is no one signing their emails? by lokedhs on Thursday March 14, 2019 @05:44AM (#19387700)

I don't use Whatsapp, so I don't actually have first-hand knowledge. Now that I think about it, it may be that I was told that it automatically regenerates the key more often than they need to, which would have the same effect.

[ Parent | on HN ]

Re:Why is no one signing their emails? by oarsinsync on Friday March 15, 2019 @07:44AM (#19398731)

I don't believe this is true. Every time I've asked about a key change, it has been because someone either got a new phone, reinstalled the app, or reset their phone.

[ Parent | on HN ]

Re:Why is no one signing their emails? by hiq on Thursday March 14, 2019 @05:55AM (#19387760)

It's a setting which is off by default.

[ Parent | on HN ]