Hacker News Reader

That's not how it works: https://news.ycombinator.com/item?id=11432661

This makes no sense. There is nothing to prove that that WhatsApp is really using the aformentioned Signal code. It's closed source, so it could be anything inside.

The answer to your objections is literally in the comment I linked, did you read it? One keyword is RE.

Yes we do as there are 3rd party clients (eg yowsup) that also need to implement it.

Problem is that you don't know of the app is leaking your keys somewhere else.

This is my point exactly. It doesn't matter as long as the app is closed source. You could do the worlds most secure E2EE implementation, but then send a copy of all keys to Facebook servers.

>we simply don't know if it really is doing E2EE at all

Why don't we know? Isn't it trivial to set up a MITM test setup and snuff the traffic and analize it?

It's trivially easy to encrypt the traffic and then send a copy of the private key to Facebook's servers. You would not be able to decrypt it, but they would.