[Propen]

If the msg content is encrypted what metadata should I "worry about" when using WhatsApp IF I am okay with not being anonymous (eg. for everyday use with friends). What can FB tell me based on JUST WhatsApp? (let's say they haven't connected my identities with FB yet)

[tptacek]

Here's another way to think about it: privacy and security are related but not the same thing. If you care more about PRIVACY, use Signal or Wire. If you care more about SECURITY, use Signal or WhatsApp. I care more about security, because privacy controls don't much matter if there's an exploitable vulnerability anywhere in the messaging stack. But you could reasonably argue that privacy is an everyday concern and security is a black-swan concern --- that is, when we're comparing Double Ratchet protocol messengers like Wire, Signal, and WhatsApp.