SUMMARY

  • The EU has identified WhatsApp as a gatekeeper in the messaging industry and has given it a few months to enable interoperability with other apps.
  • The EU’s Digital Markets Act aims to promote fair competition and give consumers more options for alternative services.
  • WhatsApp has already begun working on interoperability with other apps, potentially allowing smaller players like Signal to compete more fairly.
  • @woelkchen
    link
    English
    41 year ago

    so we can’t make guarantees about WhatsApp conversation participants.

    “We” can’t but Signal, who work on WhatApp’s source code, can: https://signal.org/blog/there-is-no-whatsapp-backdoor/

    tldr: When contacts have verified each other, communication is secure.

    If you think that Signal can’t be trusted, you should not use their client either.

    • @[email protected]
      link
      fedilink
      English
      5
      edit-2
      1 year ago

      signal may have given a fully vetted and correct implementation to whatsapp, but because its closed source we don’t know if it has changed, or if its really implemented on all conversations.

      It changes the trust model of conversation participants.

      To answer your query, if signal was closed source, I wouldn’t trust it either.

      • @woelkchen
        link
        English
        31 year ago

        signal may have given a fully vetted and correct implementation to whatsapp

        They were not “given” it. They are literally the contractor who worked on that: “Over the past year, we’ve been progressively rolling out Signal Protocol support for all WhatsApp communication across all WhatsApp clients.” –https://signal.org/blog/whatsapp-complete/

        but because its closed source we don’t know if it has changed, or if its really implemented on all conversations.

        I’m not an encryption developer. I can’t vet this for Signal’s own app either.

        • @[email protected]
          link
          fedilink
          English
          41 year ago

          …and because its closed source, community cryptography developers and researchers can’t vet it for you either. That is the core issue, its not about trust.

          It’s about capabilities that inform the threat model, and the exposure model.