Building end-to-end security for Messenger – Engineering at Meta

Re:Building end-to-end security for Messenger – Engineering ... by lukevp on Thursday December 07, 2023 @06:02AM (#38555105)

Hmm, but it’s OK to trust that web browsers implement TLS properly? And your router isn’t MITMing you? Or your SSH app exfiltrating all your server information? Why is this different?

[ Parent | on HN ]

Re:Building end-to-end security for Messenger – Engineering ... by blackoil on Thursday December 07, 2023 @06:24AM (#38555227)

> And your router isn’t MITMing you

Can it do so if the encryption and key management is at the client?

> Or your SSH app exfiltrating all your server information

That's a small niche, and most service don't expose SSH to public.

> OK to trust that web browsers implement TLS properly

hmm, you may have a point, maybe they'll ensure that only whitelisted browsers can access it, like Chrome with DRM for HTML. Only purpose is public safety. /s

[ Parent | on HN ]