Post B4a3XOGN47BBxqkYaG by faket@veganism.social
 (DIR) More posts by faket@veganism.social
 (DIR) Post #B4a2CR0FaDP6QWeYvg by delta@chaos.social
       0 likes, 1 repeats
       
       End-to-End Encryption is good but metadata protection counts as much. Names, group descriptions and memberships, avatars, who talks to whom ... Both #deltachat and #signal go to great length to protect all the metadata that WhatsApp grants itself gratuitously. #Matrix  stores similar scales of metadata on their servers, even if you can choose which server stores it.Everything is better than #Telegram which additionally stores message contents in all group chats/channels and most 1:1 chats.
       
 (DIR) Post #B4a2QOkEmB9nTdp0CW by faket@veganism.social
       0 likes, 0 repeats
       
       @delta Do you have a position on SimpleX?
       
 (DIR) Post #B4a2qIS0ncprUBe7lI by hywan@floss.social
       0 likes, 0 repeats
       
       @delta How do you get these information about WhatsApp? Is in the app itself?
       
 (DIR) Post #B4a2qIhFsx1qFSmIWO by delta@chaos.social
       0 likes, 0 repeats
       
       @hywan most of the info about whatsapp is found in https://www.whatsapp.com/legal/privacy-policy-eea?lang=en
       
 (DIR) Post #B4a3PkLH5lSY7nOmQ4 by delta@chaos.social
       0 likes, 0 repeats
       
       @faket we are lightly following its developments but are not impressed by its UI/UX, and also don't think they particularly care for resilience (they are blocked since >15 months in russia, and don't do much about it, for example), also they don't appear to care much for people with small data plans and bad networks, and rather tune everything for resource-rich always-connected users. They also appear to be going down the crypto-coin rabbithole quite a bit.  YMMV.
       
 (DIR) Post #B4a3XOGN47BBxqkYaG by faket@veganism.social
       0 likes, 0 repeats
       
       @delta Thank you for your input :D
       
 (DIR) Post #B4a5Qnlw1aTwxcV2rQ by delta@chaos.social
       0 likes, 0 repeats
       
       @ahalam  all the mentioned metadata in the top post resides in the encrypted parts of messages. The server does not see group descriptions, names, avatars etc.  We'll soon do a blog post on this and recent advances to "zero metadata" operations, stay tuned :)
       
 (DIR) Post #B4eyfaJWcGzjfx73iq by celoman@mastodont.cat
       0 likes, 0 repeats
       
       @delta @florenciaelg
       
 (DIR) Post #B4gLrUJRFOcedpg2vg by ebrum@mastodont.cat
       0 likes, 0 repeats
       
       @delta i don't even believe WA's e2e encryption is real. When you reactivate whatsapp from a new phone, without the transfer protocol, but from the same number, you can see the plaintext of all messages you missed. If the key was in your "end" (old phone) only, there would be no possible way to see those messages. Whereas for Signal if you don't explicitly back up and transfer keys, you won't be able to decrypt messages your received in the meantime.
       
 (DIR) Post #B4gP1zUKUXGA5bTGpU by delta@chaos.social
       0 likes, 0 repeats
       
       @ebrum This is likely caused not by decrypting queued messages, but by the sender automatically re-encrypting the messages to your new device and resending them when key change is detected, see https://signal.org/blog/there-is-no-whatsapp-backdoor/ (and https://www.theguardian.com/technology/2017/jan/13/whatsapp-design-feature-encrypted-messages for the referenced article).
       
 (DIR) Post #B4gR3KLqbkrozeGizg by ebrum@mastodont.cat
       0 likes, 0 repeats
       
       @delta very interesting, thank you!
       
 (DIR) Post #B4gT0DjOxs6dV7vrm4 by benjo@androiddev.social
       0 likes, 0 repeats
       
       @delta @ahalam can't wait to read your blog post, will be enlightening for many of us. Metadata encryption is a trending topic ^^