News for hackers. Stuff that matters.

A comment on WhatsApp – Security of End-to-End Encrypted Backups [pdf]. Parent comment

Re:WhatsApp – Security of End-to-End Encrypted Backups [pdf] by blackoil on Saturday September 11, 2021 @02:55AM (#28489927)
Next step is who owns the key, if it is FB that kills E2E story. If it is user, they'll forget/lose it, so it doesn't scale to 2B users. Currently Apple/Google are set as the custodians of the key.
[ Parent | on HN ]
Re:WhatsApp – Security of End-to-End Encrypted Backups [pdf] by Thorrez on Sunday September 12, 2021 @03:41AM (#28499312)
From the pdf, it sounds like the HSM owns the key, and will only give it up if the correct password is provided.
[ Parent | on HN ]