Is WhatsApp really secure?

onomatopoeia99

that wrote: »

Mmmmmm, they can be intercepted, but not decrypted easily by your average MCDonalds wifi sniffing teen.

There could be a shared keys that you do not know about, and I'd be surprised if there was not some.

No-one should be operating a customer wifi that is vulnerable to firesheep or equivalent nowadays (or to ARP cache poisoning or anything else). Even if the encrypted payload can be intercepted, GCHQ doesn't have the computing power to decrypt anything secured by a properly implemented public key system in any kind of timely fashion.


I also highly doubt that Signal (the protocol used by whatsapp) shares the private keys or session keys with anyone, or has "master keys", it would completely go against what it sets out to achieve.