This is why products which offer end-to-end encrypted communication through in-browser crypto are often considered snake oil, unless they use some form of a packaged & signed browser extension. So, if you’re way too attached to the system for some reason, you’ll need to stay with WhatsApp until Signal comes up with a similar system.
Anyone able to intercept the client-server SSL connection (and the server itself) can silently change the code you receive and execute, with a very low risk of getting caught. This effectively reduces the security of your end-to-end encrypted communication to that of your SSL connection to the server, i.e.
Instead, you're re-requesting the code you'll run every single time you visit the site (making audits practically impossible). Signal Private Messenger Best for Secure Messaging Overall 4.5 Outstanding Why We Picked It We consider Signal the gold standard for secure messaging apps, and its easy to see why. The fundamental problem with web interfaces is: there's no way to version, sign and securely distribute a web page. And yes, I read the following, it just didn't supply a strong gorund IMO: """ Will there be a Signal web app? Signal's developers have said: "Nothing like this is on the roadmap for now." A server-based web app might introduce some security issues that Signal does not currently have, as explained by a community member in February 2017:
0 kommentar(er)
