End-to-end encryption

Last year, the Facebook-owned Whatsapp messaging app rolled out so-called end to end encryption for all its users. This means that the key required to decrypt messages as they pass through the Whatsapp network is only ever known to the sender and receiver of those messages. The underlying technology used by WhatsApp is the same as that used in Open Whisper Systems privacy-centric messenger client, Signal. The open source Signal Protocol was designed by privacy activist and well-known hacker, Moxie Marlinspike. That protocol will also be rolled out to Facebook Messenger shortly, although secure messages will only be available on one device, otherwise key distribution becomes problematic.

As this kind of ‘strong encryption’ becomes more prevalent, those depending on it will see increased attacks on the endpoints themselves, namely devices used by the communicating parties. The woeful state of Android security, largely due to carriers’ ineptitude at rolling out OS updates across their networks (because it’ll mess with the stupid apps they insist on installing on contract phones), offers hackers many opportunities. The Australian seems to be joining the many countries who are in the process of enacting anti-encryption laws.