I signed into LINE from a different phone. It couldn't decrypt old history, but my contacts got no notice of my public key change. Fail.
-
Isn't this how
@WhatsApp's use of OTR works today? It's still useful against passive (read: bulk) MITM. Ideal? No. But useful.
TLS protects against passive network MITM. If you control their servers you can just do active MITM.
-
-
Sure. Is your question "What value does OTR without key verification have over TLS?" I think some. (1/2)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
It protects against a passive MITM sitting somewhere on
@WhatsApp's network. You know, "SSL added and removed..." (2/2)Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.