Re:Signal v7.0.0 with phone number privacy
by illiac786 on Sunday February 18, 2024 @02:55PM
(#39422491)
That is also valid for 1:1 chats, not specific to groups. It says "if you don't check the key if the remote party via a secondary channel you are vulnerable to MITM attack of the server is owned"
Which is obvious, every single E2EE encryption tool which is centralised is susceptible to it, but I would wager that decentralised too, although maybe harder to realise.
https://crypto.stackexchange.com/questions/77319/triple-diff...