What are the factors that affect service availability for #XMPP on a mobile device? Can a well-designed client solve them, or XEPs? I was able to convince some people to switch from #WhatsApp to XMPP (with the #Conversations app) and they loved it, but complained that sometimes it wouldn't deliver messages, making them to switch back to whatsapp for "emergencies." This upsets me, but I wonder if there's any fix.
By the way, do you even know #matrix already? Similar to #xmpp it is a decentralized alternative to #whatsapp and stuff. It brings end2end-encryption and voip support. It is very modern and there are feature-rich crossplatform clients like #riot.
If you like decentralized and free (as freedom) networks like #mastodon, have a look!
1. WhatsApp has a backdoor that can be used to decrypt your "end-to-end encrypted" texts. 2. People discover said backdoor (I guess through poking around or reverse engineering, since it's proprietary and code inspection isn't possible) and warn WhatsApp about it. 3. WhatsApp acknowledges existence of backdoor, says it's intentional ("it's not a bug, that's our design!") and they won't bother fixing it. 4. Millions of people continue using communications that can be actively intercepted, because they were told that some "encryption" thing they know nothing about would protect them.
So the explanation from OWS about #WhatsApp sounds maybe reasonable, but without source code the claimed behavior can't be verified. It also sounds as if the key change notification is turned off by default and that it's the server which detects the key change and notifies the clients (again we just have to take someone's word for that this is what happens).
So I think the Guardian criticism still holds:
"The recipient is not made aware of this change in encryption, while the sender is only notified if they have opted-in to encryption warnings in settings"
That is, by default key changes are silent and the receiver is unaware if they happen. Bob could believe that he's talking to Alice, but could actually be talking to Alice through Eve.
The security flaw is not in Moxie's Axolotl protocol, but in the #WhatsApp implementation. Signal software doesn't have this flaw, it doesn't automatically re-key messages and just refuse to deliver. I doubt Moxie has control over the WhatsApp implementation.