Code Verify: An open source browser extension for verifying code authenticity on the web (for WhatsApp)

[Gandalf_The_Grey]

Since WhatsApp introduced multi-device capability last year, we’ve seen an increase in people accessing WhatsApp directly through their web browser via WhatsApp Web. With this shift in mind, we’ve been looking at ways to add additional layers of security to the WhatsApp Web experience. Starting today, you can now use Code Verify, an open source web browser extension that automatically verifies the authenticity of the WhatsApp Web code being served to your browser. Code Verify confirms that your WhatsApp Web code hasn’t been tampered with or altered, and that the WhatsApp Web experience you’re getting is the same as everyone else’s.

For years, WhatsApp has protected the personal messages you send on WhatsApp Web with end-to-end encryption as they transit from sender to recipient. But security conscious users need to be confident that when WhatsApp Web receives these encrypted messages, it is protected as well. In contrast to a downloadable mobile app, a web app is usually served directly to users, without a third party reviewing and auditing the code. There are many factors that could weaken the security of a web browser that don’t exist in the mobile app space, such as browser extensions. Additionally, because the mobile app space was built after the web was created, the security guarantees offered on mobile can be stronger, particularly given that third-party app stores review and approve each app and software update. But today, that’s changing, as Code Verify is bringing even more security to WhatsApp Web.

Code Verify works in partnership with Cloudflare, a web infrastructure and security company, to provide independent, third-party, transparent verification of the code you’re being served on WhatsApp Web. We hope this gives at-risk users peace of mind.

No other end-to-end encrypted messaging service has this level of security for people’s communications on the web. In addition to deploying Code Verify for WhatsApp Web, it is also being offered as open source so that other services can use it as well.

Code Verify: An open source browser extension for verifying code authenticity on the web

Update on June 16, 2023 at 10:30AM PT: Today we’re announcing the introduction of Code Verify for Instagram Web. The Instagram Code Verify extension is offered by Meta Open Source and is available …

engineering.fb.com

How Cloudflare verifies the code WhatsApp Web serves to users

Understand how Cloudflare is helping WhatsApp verify the code they’re using for secure messaging hasn’t been tampered with.

blog.cloudflare.com

 

[SpiderWeb]

Define tampering, Facebook... I can see this getting triggered by adblockers and userscripts stripping all the spyware off Whatsapp web version and the thought alone that people could use ways to avoid being tracked while using Whatsapp for free bothered Meta so much, they invented this extension.