8mo ago

WeChat modified TLS encryption protocol exposes users to security risks

www.techspot.com

A recent investigation by the University of Toronto's Citizen Lab has uncovered potential security weaknesses in WeChat's custom encryption protocol. These weaknesses arise because the developers of WeChat, which boasts over a billion monthly active users, have modified the Transport Layer Security (TLS) 1.3 protocol, creating a version called MMTLS.

6 comments

WeChat's software has security issues? Color me shocked. Shocked, I tell you.
Well, not that shocked.
Also:
WeChat's custom encryption protocol
Don't do that
- I thought we all agreed that WeChat is a security vulnerabilliy
the developers of WeChat [...] have modified the Transport Layer Security (TLS) 1.3 protocol, creating a version called MMTLS.
Man in the Middle TLS
nothing to see here :)
Next you're going to tell me that ROT13 is a problem?
Don't roll your own crypto.