WhatsApp claims to use the Signal protocol. But they use a proprietary fork of the protocol. Maybe the messages are actually encrypted, but the key is probably sent to Facebook’s servers. Or the messages are sent to Facebook servers unencrypted, before they get encrypted and sent to the actual recipient. You can’t trust Facebook to implement encryption properly. Actually, you shouldn’t trust Facebook with anything.
Last year an internal guide from the FBI was leaked, which explains how to get access to WhatsApp messages, without taking any of the devices used for the communication. That’s kinda sus, isn’t it?
3 Likes