Hacker News Reader

I think the question should be do we have proof that it is secure?

Moxie Marlinspike's reputation is dependent on his ability to deliver a secure product. Signal/Signal Protocol development is funded by donations and grants from groups like the Freedom of the Press Foundation, EFF, etc, and those groups desire a secure messaging product. Moxie has staked his reputation on WhatsApp's implementation of the Signal Protocol multiple times on the OWS blog, which he would not do if he disapproved of WhatsApp's implementation. There's no hard proof (except what can be gained through analysis of the executables), but there's no incentive for Moxie to lie, therefore, WhatsApp's implementation should be reasonably secure.

And you call that a proof? :-)

I did say "there's no hard proof". This was purely an analysis of incentives.

I think "speculation" is a better word here. :-)

Reply on news.ycombinator.com