It shouldn't be allowed to call it E2E otherwise. If a third party is involved in the communication, it's just a middleman attack that pinky promise to not read your messages.

[–] ruination@discuss.tchncs.de 7 points 2 years ago (3 children)

That depends for me. Is it open source? If so, check the source code, you can see for yourself whether that third party is doing anything shady? Anything closed source like WhatsApp, however, and I 100% agree with you.

[–] alcasa 7 points 2 years ago (1 children)

Open source is not sufficient, you also need to be sure that the version you install is the version you inspected. In Appstore or Playstore for mobile this is not straightforward. Hell, even linux packages sometimes contain tons of maintainer patches that are not upstreamed

[–] ruination@discuss.tchncs.de 2 points 2 years ago

True, that's part of the reason I switched to Gentoo

load more comments (1 replies)