News for hackers. Stuff that matters.

A comment on How did Facebook intercept their competitor's encrypted mobile app traffic?. Parent comment

Re:How did Facebook intercept their competitor's encrypted m... by ahazred8ta on Saturday July 27, 2024 @10:23PM (#41090815)
Try comparing P2P OTR E2EE vs Non-CA TOFU SSH
[ Parent | on HN ]
Re:How did Facebook intercept their competitor's encrypted m... by dylan604 on Saturday July 27, 2024 @10:32PM (#41090845)
hell, even I don't know what the "words" you just used mean!
[ Parent | on HN ]
Re:How did Facebook intercept their competitor's encrypted m... by iam-TJ on Sunday July 28, 2024 @04:13AM (#41091912)
That got me too for a few seconds whilst my brain cogs whirred... but the latter sounds tastier than the former for some reason!

For those wondering:

  P2P OTR E2EE == Peer to Peer, Off The Record, End to End Encryption
  Non-CA TOFU SSH == Non-Certificate Authority, Trust On First Use, Secure SHell
[ Parent | on HN ]
Re:How did Facebook intercept their competitor's encrypted m... by yjftsjthsd-h on Saturday July 27, 2024 @10:43PM (#41090880)
Any app capable of installing a TLS CA is capable of writing to known_hosts (or authorized_keys, while we're at it).
[ Parent | on HN ]