|
|
|
|
|
|
by zedred
3441 days ago
|
|
|
They don't use the signal protocol, they don't even use X3DH or Double Ratchet. That citation of yours is just a download link, not an actual reference to your point. The project is also kind of a mess. Check out their privacy policy, Wire maintains a server side copy of your entire contact list, all the groups that you're in, the plaintext metadata for your groups (membership, plaintext group title, plaintext group avatar). Check out some of the code. They have broken voice encryption, and leak enough data to reconstruct the audio of your calls. They leak tons of plaintext directly back to themselves, like searches, and rolled their own messaging crypto. They have been caught lying about what kind of encryption they provide[1], they lied about being open source for years, they lied about being based in switzerland. From what I can tell, the only people promoting Wire are usually on Wire's marketing team. 1: http://www.pcworld.com/article/2855745/new-communications-ap... |
|
|
My understanding is that the developers sit in Berlin, but the legal entity is in Switzerland.
Their privacy policy [1] states that they retain logs for 72h, and not much else. Only hashed contact info (emails/phone numbers) are uploaded, after opt-in. It all sounds very reasonable.
Your argument seems to be that they're an untrustworthy mess - but I don't see much evidence of that, except for possibly some braggadocio in that old article.
> Check out some of the code.
Yes, it is on github [2], so you can do that, which is nice.
[1] https://medium.com/wire-news/simple-privacy-policy-72-hour-l...
[2] https://github.com/wireapp