Hacker News Reader

OTR for mobile chat messaging like WhatsApp was discussed several times. At least the former ones (do not know version 3) did not allow OTR because both clients have to be online for handshaking and exchanging keys which is very often not the case for two mobile phones.

View on HN

Modified version of OTR (by Moxie) works around that restriction.

https://www.whispersystems.org/blog/asynchronous-security/

Doesn't this solution require trust in the server caching the pre-keys?

No, because you can still verify a user's fingerprint after the handshake has been completed. That's something that you'd want to do with traditional, non-asynchronous OTR as well.

Reply on news.ycombinator.com