Replay, reordering, and blocking attacks: the protocol is effectively stateless, allowing adversaries (including a malicious server) to manipulate message history without detection.
Impersonation attacks: E2EE messages are not cryptographically bound to their sender or direction of communication. This enables forging authorship of messages in both one-to-one and group chats.
Plaintext leakage: Usability features like stickers and URL previews leak sensitive information outside the encrypted channel, sometimes in ways that are not obvious to users.
beep
piefed.world
beep@piefed.world