4
$\begingroup$

Why do they recommend the user to verify the 60 digit code in person or via other medium of communication.

How is the security code generated and work on Signal and Whatsapp Messanger?

$\endgroup$
1
  • 1
    $\begingroup$ The security code is based on static information specific to a conversation (ie public keys). By confirming it out-of-band you confirm that there's no man-in-the-middle attacker. $\endgroup$ – SEJPM Jan 15 '17 at 16:11
4
$\begingroup$

Here is a detailed blog post about the safety numbers: https://signal.org/blog/safety-number-updates/

They are unique per conversation and basically consist of hashes of your and your contact's public long-term key.

You should compare them if you want to be sure that there is no man-in-the-middle.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.