News for hackers. Stuff that matters.
Re:Ask HN: How do we know Signal or Telegram don't store our... by henearkr on Wednesday January 13, 2021 @02:41PM (#25766996)
[edited]

Indeed it is far from straightforward that merely doing a video call suffices to check the keys.

Signal is famously using a special protocol for secure key sharing through the server, which I have not studied.

But as said by another comment, there is no way around verifying explicitly the public key using an independent channel.

There are no comments on this comment yet.