Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Difference is that the WhatsApp client re-encrypts the message with the new key from the server and re-sends it without user intervention ("non-blocking"), so even if you cared, you can't prevent it.

With the alternative, people that don't care could tick "verified" with or without verifying, but you could also click "cancel" (with or without verifying).



What difference does it make?

                                ALICE
                        When would you 
                        like to meet?
    BOB
    Tomorrow, 19:00, by the
    north tennis courts.
                                ALICE
                         Sounds good.

      !!! BOB's key has changed !!!

    BOB
    Actually, could we meet
    at my place?  I'm going
    to be super busy tomorrow.
If Alice and Bob are doing something that needs to remain secure, Alice would be a fool to trust Bob's messages after the key change without manually verifying the new key with Bob. How does withholding messages help, aside from telling the server which people have enabled the setting and which people have not? [edit: I just realized you were talking specifically about the case where manual verification is enforced for all users; disregard the last phrase.]

Admittedly one angle I can kind of agree with is that layman users may not understand the implications of a key change and the importance of out-of-band verification, and blocking messages until verification would be a way of signaling the significance of the key change. But... counterpoint to that is that users interested in security are probably already dead in the water in that regard if all they have is a layman's knowledge of how crypto works.


BOB: Ok, we're all good, we have verified our keys in person, send me the launch keys to the nuclear missile. Good night. [tick mark, tick mark]

ALICE: Here they are: 12345678. [tick mark]

[Eve on the compromised server to Alice]: Hey ho, new key, please send again.

ALICE [with new MITM key, and no way to block this]: Here they are: 12345678.

!!! By the way, Bob's key has changed. !!!

BOTH: Ooops.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: