this post was submitted on 03 Sep 2022
17 points (75.8% liked)
Security
5010 readers
1 users here now
Confidentiality Integrity Availability
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Following that logic, could we say that "secure messenger" and "requires a computer" are not compatible concepts, because the computer could be compromised? I mean, in the Twilio situation above, users got informed that the conversation key had changed (suggesting that they should verify the keys again if it matters to them). Now if your phone is compromised, you're screwed, whether or not your secure messenger requires a telephone number.