Hacker News new | past | comments | ask | show | jobs | submit login

You contradict with your previous statement that Signal does not provide OOB key verification when they show you the fingerprints. Because that is essential for not being MITM.



> You contradict with your previous statement that Signal does not provide OOB key verification...

I do no such thing because I never made such a statement. I addressed your claim about mandatory OOB key exchange, not optional verification. To jog your memory, the two times I brought up OOB exchange were as follows:

>> Last time I checked whats app didn't require any kind of OOB key exchange, or ability to set your own password.

> Neither does Signal/TextSecure. Signal most definitely has E2E encryption. [0]

and

> Signal neither requires OOB key exchange, nor does it require that you set a password to encrypt Signal data while on disk. [1]

Notice that I talk about how Signal doesn't require OOB key exchange, not that Signal doesn't provide OOB key verification.

[0] https://news.ycombinator.com/item?id=11124807

[1] https://news.ycombinator.com/item?id=11125534




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: