WhatsApp Security Vulnerability

via Schneier on Security by Bruce Schneier on Tue, 17 Jan 2017 12:09:58 GMT

Back in March, Rolf Weber wrote about a potential vulnerability in the WhatsApp protocol that would allow Facebook to defeat perfect forward secrecy by forcibly change users' keys, allowing it -- or more likely, the government -- to eavesdrop on encrypted messages. It seems that this vulnerability is real: WhatsApp has the ability to force the generation of new encryption...