WhatsApp implements ‘end-to-end encryption’ to protect users

[FlyJ]

The popular messaging service WhatsApp said Tuesday it had implemented “full end-to-end encryption,” a move which steps up privacy but may lead to conflicts with law enforcement agencies.

 

The Facebook-owned mobile application with one billion users worldwide made the announcement following weeks of intense debate over efforts by US authorities to compel Apple to help break into an encrypted iPhone.

 

“WhatsApp has always prioritized making your data and communication as secure as possible,” a blog post announcing the change said.

 

“And today, we’re proud to announce that we’ve completed a technological development that makes WhatsApp a leader in protecting your private communication: full end-to-end encryption.”

 

This means that “when you send a message, the only person who can read it is the person or group chat that you send that message to,” the statement said.

 

“No one can see inside that message. Not cybercriminals. Not hackers. Not oppressive regimes. Not even us.”

 

Moves by technology firms to implement the kind of encryption where even the companies themselves don’t have “keys” to unlock data have unleashed criticism in law enforcement circles claiming this creates “warrant-proof” spaces for criminals and others.

 

The blog post by WhatsApp co-founders Jan Koum and Brian Action said encryption is an important tool for its users.

 

“We live in a world where more of our data is digitized than ever before,” they wrote.

 

“Every day we see stories about sensitive records being improperly accessed or stolen. And if nothing is done, more of people’s digital information and communication will be vulnerable to attack in the years to come. Fortunately, end-to-end encryption protects us from these vulnerabilities.”

 

WhatsApp is reportedly involved in a court battle similar to the one involving Apple, which fought a federal effort to provide assistance in unlocking an iPhone used by one of the shooters in last year’s San Bernardino killing spree.

 

Other reports say WhatsApp and another application called Telegram were used by the perpetrators of the November 13 Paris attacks that left 130 people dead.

 

US Congress is expected to consider legislation which would require technology firms to retain “keys” that could retrieve data in a criminal investigation, with a court order. Similar measures are under consideration in Britain and France.

 

A broad coalition of technology companies and activists have argued against any encryption rules that would allow “special access” for law enforcement, claiming these would be vulnerabilities that could be exploited by hackers or repressive governments, and threaten security of banking, electronic commerce, trade secrets and more.

 

– ‘Victory for human rights’ -Tanya O’Carroll of Amnesty International welcomed the move, calling it “a major boost for people’s ability to express themselves and communicate without fear.”

 

“This is a huge victory for human rights, especially for activists and journalists who depend on strong and trustworthy communications to carry out their work without putting their lives at greater risk,” she said in a statement.

 

Koum said in the blog post that the move was “personal,” noting that “I grew up in the USSR during communist rule and the fact that people couldn’t speak freely is one of the reasons my family moved to the United States.”

 

Facebook in 2014 announced it was acquiring WhatsApp for an eye-popping $19 billion in stock and cash.

 

Analysts say WhatsApp is especially popular in some areas of Latin America, Asia and Africa, where it is used in place of official telecom networks.

 

Source

[kimi]

This is certainly a welcome development. The reason why I do not use WhatsApp as a chat platform is because of how porous it is. Now I'm ready to buy some shares!LOL

[Althena]

This is great news! Finally, people will use encryption as default and not even think about it, instead of it being a privilege of techies :)

Hopefully, more apps will implement to E2E and make their users safe from sys admins, phone companies, governments, and hackers

My only problem with this roll out is that WhatsApp is still closed source, meaning independent reviewers can not check the code and its security to verify that Whatsapp is actually using E2E. We just have to take their word for it. They are using Axolotl protocol developed at Signal/Open Whisper Systems for their crypto, so why are they still hiding it seeing as it is open sourced? Doesn't add up

Secondly, Whatsapp and facebook are owned by the same company. Why secure 1 and not the other? Something doesn't smell right.

[Hawken]

It definitely doesn't smell right. Just going to stick to pidgin and its OTR.

[FlyJ]

I don't think the mgt of WhatsApp will release such information if it ain't true. They wouldn't want to be slammed with a law suit should they be found wanting.