It’s been a while since I looked it up, and I don’t use WhatsApp, but I believe it’s E2E encrypted but the mechanism they use allows their servers to also hold the keys to decrypt.
Presumably they hold a master key that all other keys are derived from.
Yes. This does make it very convenient to just hop on web.whatsapp.com without also having your phone online.
WhatsApp’s fine for talking to normie friends who won’t ever switch to something else, for managing business clients, etc. But it’s something to be aware of.
The world would be a better place if we all used Signal, XMPP, etc.
Also they want to be able to scrape/sell your chat data so they don’t want to encrypt it.
Correct me if I’m wrong but isn’t WhatsApp meta and encrypted?
It’s been a while since I looked it up, and I don’t use WhatsApp, but I believe it’s E2E encrypted but the mechanism they use allows their servers to also hold the keys to decrypt.
Presumably they hold a master key that all other keys are derived from.
Yes. This does make it very convenient to just hop on web.whatsapp.com without also having your phone online.
WhatsApp’s fine for talking to normie friends who won’t ever switch to something else, for managing business clients, etc. But it’s something to be aware of.
The world would be a better place if we all used Signal, XMPP, etc.