Hacker News Reader

> Yes, they could serve you a MITM key, but it would be easily discoverable when you compare security codes in the client.

Who does that for every conversation? Or even once per week/contact?

View on HN

Or use a client like Signal that tells you when the key has changed.

security researchers

So put them in a cohort and treat them differently than the rest of the users? Personalised key exchange? Possibilites are endless. If you don't trust the closed source operator here, then that end to end encryption should mean nothing for you.

Reply on news.ycombinator.com