Conversations v1.15.0 released with new trust/verification concept
gultsch.de
gultsch.de
Encryption without verification is ineffective.
Opportunistic encryption (without authentication) is still a very valuable tool, as it prevents passive attackers from reading your traffic. To actually intercept encrypted-but-unauthenticated messages, an attacker needs to obtain an (often permanent) MitM position, which is not impossible but still much harder to achieve.