From WhatsApp or Signal
Passed on still locked-
Your friend’s phone
They write on WhatsApp or Signal, which lock the message end to end for each of your linked devices.
- Lockedend to end
-
Kristik’s relay
Holds your connection to WhatsApp or Signal but not the keys to open what arrives on it, and passes each message on still locked. It sees who wrote to whom, when, and how large the message is.
- Lockedas the network sent it
-
Your phone
Opens it with keys kept on this phone, then locks it again for your other devices before Kristik’s message server stores it.
What this doesn’t cover yet. A first message to someone you have never written to is not yet protected from Kristik’s servers. Nothing yet checks the keys the relay hands your phone, so someone who took over the relay could try to read what you send or pose as a contact; your phone warns you when a contact’s security code changes, and their messages wait until you trust it. Signal doesn’t carry files, edits or deletions yet, or write to groups. And it isn’t yet proven: Kristik’s servers don’t read these messages, and Kristik doesn’t claim they couldn’t.