"This means the only way WhatsApp could comply with these demands is by completely altering their software with insecure cryptography."
I get what the author is trying to say, but getting technical details like this incorrect makes it difficult for me to want to keep reading these types of articles. There is no need for WhatsApp, et all to make the crypto insecure, all it needs to do is keep a record of the keys in a centralized database. That's why having centralized Commination isn't good, all you have to do is own the key handling process and you're good.
To follow the analogy in the article, the lock is fine, just 3 letter agencies have the key.
I get what the author is trying to say, but getting technical details like this incorrect makes it difficult for me to want to keep reading these types of articles. There is no need for WhatsApp, et all to make the crypto insecure, all it needs to do is keep a record of the keys in a centralized database. That's why having centralized Commination isn't good, all you have to do is own the key handling process and you're good.
To follow the analogy in the article, the lock is fine, just 3 letter agencies have the key.