<head></head><body>WhatsApp just announced end-to-end encryption on their service, and the details show that they do not use TLS but another TLS-like protocol called Noise Pipes which was designed by one man. <span style="line-height: 1.4;">From Moxie ( https://news.</span>ycombinator<span style="line-height: 1.4;">.com/item?id=11431623 ):</span><div><br></div><div>> <span style="line-height: 1.4;">WhatsApp was already using a
custom protocol instead of TLS. We worked with them to transition over
to Noise Pipes, which has some advantages over what they were doing
before.</span></div><div><br></div><div>I know Moxie has given a lot of thoughts into TLS, and that Trevor is a legend, bla bla bla... but what about "crypto should be boring"? What about the peer-review and all the research done around TLS and its implementations?</div><div><br></div><div>But then it might makes sense, if the protocol is simple enough, to try and build that subset of TLS. But what might go wrong? What has to be re-designed? Replay protection? Consistency? Integrity? It implies that you already know a lot about TLS... <span style="line-height: 1.4;">What do you people think?</span></div><div><br></div><div>Regards,</div><div>David</div></body>