How end-to-end encryption works: why even WhatsApp cannot read your messages
Fake public keys: what if the chat server hands you the wrong key?
Your chat app gets your friend's public key from the company's server. It trusts the name on the key. What stops the server from giving you its own key and reading everything?
-
1
Here is the trick Rono could pull, if he dared. First, the server makes a key pair for Rono, the way any phone does.
-
2
When your phone asks for Miva's public key, the server could hand over Rono's, with Miva's name on it. Miva's phone, asking for yours, would get Rono's public key too.
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88