Inside EndToEnd
Compare the identity behind the chat
Use safety numbers to compare a contact’s conversation identity on a channel you already trust.
The everyday friction.
A familiar display name does not confirm the keys behind a conversation. An identity change needs a deliberate trust decision. Verification should describe a particular identity, rather than a permanent label on a name.
A different way through.
EndToEnd displays a safety number for a direct conversation. Participants can compare it separately and record verification on their device. Accepting a replacement identity and verifying it are separate decisions; trusting a change does not carry the previous verification forward.
See the idea take shape.
Three moments in the experience. Explore the intended flow below.
- Open the chat’s safety number
- Compare it through a trusted channel
- Record verification for that identity
Have something to compare
Compare the safety number with the person you intend to reach.
Tie verification to an identity
Keep the verification decision connected to the keys used for that conversation.
Review a change deliberately
Treat a replacement identity as a new trust decision that can be checked again.
The difference it can make.
Have something to compare
Compare the safety number with the person you intend to reach.
Tie verification to an identity
Keep the verification decision connected to the keys used for that conversation.
Review a change deliberately
Treat a replacement identity as a new trust decision that can be checked again.
Where it stands.
Good ideas deserve an honest description of where they are today.
A matching number identifies the person only after you compare it through a channel you already trust.
A conversation sealed before it leaves
Send direct messages through an encrypted session established after a friendship is accepted.
Explore the featureBring the group and the files along
Extend encrypted conversations to group messages, replies, and shared attachments.
Explore the feature