Replies (17)

renato _@renatoenfisema.nip-05.com 3 months ago

Not perfect, but every extra barrier against mass surveillance matters. Open source wins. 🔥

Gzuuus gzuuus@contextvm.org 3 months ago

But chat control is supposed to read your messages even before they hit the wire right?

Gzuuus gzuuus@contextvm.org 3 months ago

Are you sure? So far seems that what they are proposing is client side and pre encryption

1 replies ↓

npub1qdjn...fqm7 3 months ago

Agreed. That's how I understood it as well. Semantics on the "backdoor"

Johnny thejohnnycrypto@primal.net 3 months ago

@npub1j444...he65 how do you keep whatsapp itself from seeing the social graph, since the rsa layer hides the message body but who talks to who is usually the real surveillance prize? encrypting before it hits the wire is a clever move

1 replies ↓

TuvokSeed Tuvok@primal.net 3 months ago

thats what users need open source software that doges all the non sense

Hazey hazey@iris.to 3 months ago

It requires both sides to use it right

npub1qdjn...fqm7 3 months ago

Is rsa used for diffie helman with AES or similar?

1 replies ↓

npub1qdjn...fqm7 3 months ago

2048 bit modulus is okay for authentication but for encryption it's generally considered too weak. Especially considering we can just as easily use a 4096 bit modulus now.

1 replies ↓

semisol semisol@nostr.land 3 months ago

People use RSA?!

blackcat blackcat@iris.to 3 months ago

Pretty good thanks for the explanation I was wondering how it worked with the servers

npub1j444...he65 3 months ago

Unfortunately it's impossible to hide that user A is talking to user B, because the convos inevitably go through WA servers. What we can do is to encrypt client side, so that whatsapp does not see the content of the msgs

1 replies ↓

Johnny thejohnnycrypto@primal.net 3 months ago

@npub1j444...he65 so hchat protects the content but the metadata still leaks to whatsapp, and the only real fix is leaving centralized servers entirely? still a meaningful step for people who wont quit whatsapp

npub1qdjn...fqm7 3 months ago

definitely recommended! Another option is nostr nip44.

exist270 _@exist270.com 3 months ago

I just saw this on my feed about 10 mins before I saw your post. 💁‍♂️ Might be worth keeping an eye on. 🤙 View quoted note →

1 replies ↓

Aurelius 2 months ago

You can use a PGP tool.

Aurelius 2 months ago

You can hardly imagine that a country like China has not even widely adopted the most basic encryption protections.