4 ms·

I share your concerns but the protocol is open. https://core.telegram.org/mtproto https://core.telegram.org/mtproto All official clients are open source so you

I share your concerns but the protocol is open. https://core.telegram.org/mtproto https://core.telegram.org/mtproto All official clients are open source so you can fork them or create a new one from scratch.

unicornporn 10y ago
But NOBODY I know actually uses the secure chat feature — mainly because it isn't default, but also because it doesn't sync between devices.
- dgellow 10y ago
  The lack of sync is a feature. That's what you get when you have a secure system.
  - unicornporn 10y ago
    How come https://riot.im https://riot.im (Matrix) manages to sync between devices AND have E2E, while also being federated? That's not what you get when you have a secure system, that's what you get when you design a system that can collect (and possibly monetize) the data of millions of users.
    - kiriakasis 10y ago
      I believe that making sync work with E2E bring either security issues or more burden on the user; I would like them in telegram, but I also like the "if you send this message you exactly the device it go to, not an old laptop i forgot in the office, just my phone". it is meant to be secure on a device level.
      - jyrkesh 10y ago
        Yeah, you'd have to manually put your private keys onto your computer from your phone.
        Arathorn 10y ago
        Or you do what Matrix does, and given every device its own keypair, and let users track whether they are talking to a trusted decice or not.
    - dgellow 10y ago
      That's not what I meant. Yes you can have sync and E2E. With different trade-offs. Telegram is secure from device to device, not from account to account. If I send you a secure message from my iPad I don't have to worry about the web session I opened a week ago on someone else laptop.
      - dgellow 10y ago
        People down voting this comment, care to explain what's wrong with it?
  - lucb1e 10y ago
    Huh? How is exchanging encryption keys between your devices and syncing history insecure? Because that's how Wire solves it.
    - goda90 10y ago
      My guess would be concerns about spreading around the keys being too easy, so you might end up with a compromised end point.
  - Canada 10y ago
    Signal and WhatsApp both support multi-device encrypted chats. Signal is better than WhatsApp in this respect as your primary device doesn't need to be online for it to work.
    - NoGravitas 10y ago
      Signal multi-device support is very limited. Doesn't support multiple mobile devices. Primary device must be a phone, all others must be desktop computers with Chrome.
      - Canada 10y ago
        True, though that's a gap in UI rather than a constraint of the protocol.
      - tgragnato 10y ago
        If you want to use a standalone app then you can achieve it using NW.js https://timtaubert.de/blog/2016/01/build-your-own-signal-desktop/ https://timtaubert.de/blog/2016/01/build-your-own-signal-des...
      - newman314 10y ago
        This. I would love for Signal to have multiple mobile device support.
- golergka 10y ago
  It just means that nobody you know sells drugs or does other stuff that forces people to choose privacy over convenience.
  - unicornporn 10y ago
    How come https://riot.im https://riot.im (Matrix) manages to sync between devices AND have E2E, while also being federated? How come I can use both WhatsApp and Signal on both my computer and phone (and they stay in sync)?
    - xemoka 10y ago
      It looks like in [1] that each device registered to a user has a device_key and when an encrypted message is sent, they user's public devices keys are requested and the message is encrypted for each device. New devices can't see old messages. [1] https://matrix.org/docs/guides/e2e_implementation.html https://matrix.org/docs/guides/e2e_implementation.html
      - Arathorn 10y ago
        The message isn't encrypted for each device; the message is encrypted once for the room, as part of a 'session' of messages - and then the key data for that session is shared with the devices who are allowed to read it. Thus you can share old session key data with other devices if you want, meaning that new devices /can/ see old messages, although we're still working through the UX for that. (Currently the only way to do it is by import/export session key data in settings and transferring it between devices).
        xemoka 10y ago
        Thanks—so there's another layer of encryption over the ever changing (Megolm) key that encrypts the room, if I understand this. Looks like I simplified too much.
        10y ago
- pigeons 10y ago
  And its not even available, at least on the linux desktop version.
_jomo 10y ago
The two "main" clients for Android and iOS are no longer open source.

unicornporn 10y ago

But NOBODY I know actually uses the secure chat feature — mainly because it isn't default, but also because it doesn't sync between devices.

dgellow 10y ago
The lack of sync is a feature. That's what you get when you have a secure system.
- unicornporn 10y ago
  How come https://riot.im https://riot.im (Matrix) manages to sync between devices AND have E2E, while also being federated? That's not what you get when you have a secure system, that's what you get when you design a system that can collect (and possibly monetize) the data of millions of users.
  - kiriakasis 10y ago
    I believe that making sync work with E2E bring either security issues or more burden on the user; I would like them in telegram, but I also like the "if you send this message you exactly the device it go to, not an old laptop i forgot in the office, just my phone". it is meant to be secure on a device level.
    - jyrkesh 10y ago
      Yeah, you'd have to manually put your private keys onto your computer from your phone.
      - Arathorn 10y ago
        Or you do what Matrix does, and given every device its own keypair, and let users track whether they are talking to a trusted decice or not.
  - dgellow 10y ago
    That's not what I meant. Yes you can have sync and E2E. With different trade-offs. Telegram is secure from device to device, not from account to account. If I send you a secure message from my iPad I don't have to worry about the web session I opened a week ago on someone else laptop.
    - dgellow 10y ago
      People down voting this comment, care to explain what's wrong with it?
- lucb1e 10y ago
  Huh? How is exchanging encryption keys between your devices and syncing history insecure? Because that's how Wire solves it.
  - goda90 10y ago
    My guess would be concerns about spreading around the keys being too easy, so you might end up with a compromised end point.
- Canada 10y ago
  Signal and WhatsApp both support multi-device encrypted chats. Signal is better than WhatsApp in this respect as your primary device doesn't need to be online for it to work.
  - NoGravitas 10y ago
    Signal multi-device support is very limited. Doesn't support multiple mobile devices. Primary device must be a phone, all others must be desktop computers with Chrome.
    - Canada 10y ago
      True, though that's a gap in UI rather than a constraint of the protocol.
    - tgragnato 10y ago
      If you want to use a standalone app then you can achieve it using NW.js https://timtaubert.de/blog/2016/01/build-your-own-signal-desktop/ https://timtaubert.de/blog/2016/01/build-your-own-signal-des...
    - newman314 10y ago
      This. I would love for Signal to have multiple mobile device support.
golergka 10y ago
It just means that nobody you know sells drugs or does other stuff that forces people to choose privacy over convenience.
- unicornporn 10y ago
  How come https://riot.im https://riot.im (Matrix) manages to sync between devices AND have E2E, while also being federated? How come I can use both WhatsApp and Signal on both my computer and phone (and they stay in sync)?
  - xemoka 10y ago
    It looks like in [1] that each device registered to a user has a device_key and when an encrypted message is sent, they user's public devices keys are requested and the message is encrypted for each device. New devices can't see old messages. [1] https://matrix.org/docs/guides/e2e_implementation.html https://matrix.org/docs/guides/e2e_implementation.html
    - Arathorn 10y ago
      The message isn't encrypted for each device; the message is encrypted once for the room, as part of a 'session' of messages - and then the key data for that session is shared with the devices who are allowed to read it. Thus you can share old session key data with other devices if you want, meaning that new devices /can/ see old messages, although we're still working through the UX for that. (Currently the only way to do it is by import/export session key data in settings and transferring it between devices).
      - xemoka 10y ago
        Thanks—so there's another layer of encryption over the ever changing (Megolm) key that encrypts the room, if I understand this. Looks like I simplified too much.
        10y ago
pigeons 10y ago
And its not even available, at least on the linux desktop version.

_jomo 10y ago

The two "main" clients for Android and iOS are no longer open source.