The Citizen Lab’s first public security analysis of WeChat’s proprietary MMTLS encryption protocol found that modifications to the standard TLS 1.3 protocol introduced multiple weaknesses and that an older, less secure “Business-layer encryption” is still being used, failing to meet the expected cryptographic best practices for an app used by a billion users.