Hacker News new | ask | show | jobs
by tffg 1940 days ago
Encryption is on by default. In both cases you should verify.
2 comments

It's also worth noting that verification is much easier these days given that cross-signing has been implemented.

Before you had to verify each pair of (sender, recipient) devices. This meant N*M verifications.

Now you only need to verify a new device when you are setting it up and each new recipient when you start talking to them for the first time. So it's N+M verifications.

Neat! Thank you for the correction.