Hacker News new | past | comments | ask | show | jobs | submit login

hello, how can I be sure the service mentioned above is really e2e encrypted ?



Actually I'm doing something related to this. So considering e2ee by definition doesn't require the messenger/middleman to co-operate, you can turn any communication medium into an end to end encrypted one. So I made a fully offline, client-side browser extension (it can also be a copy paste console snippet) that hooks into the send button of a POC malicious chat app and performs a key exchange for you. Then it sets up hooks to automatically encrypt messages before sending it, and also decrypt messages you receive.

So visually it looks just like you're chatting normally, but the server gets only encrypted messages.


how can we verify that the server side code they/they will publish is what they are running on their servers?




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: