4 ms·
E: Disregard. Whatsapp is doing exactly what they should be doing. Telegram seems to proxy the requests. Why is no one saying anything about end to end crypto?
by emilfihlman 9y ago
E: Disregard. Whatsapp is doing exactly what they should be doing. Telegram seems to proxy the requests.
Why is no one saying anything about end to end crypto?
Whatsapp shouldn't be able to see my messages, isn't that what they say themselves?
- jwilk 9y agoThe 4th comment is: doing a GET request over the internet is already violating e2e
- jszymborski 9y agonot if it's over TLS/SSL...
- jjnoakes 9y agoWhen both e's in e2e are the parties of the conversation, and the TLS connection is too a third party, then yes it is a violation of their claim.
- jszymborski 9y agoI'm going to have to disagree with that. The TLS connection is not part of the conversation... it has no ability to intercept messages, encrypted or otherwise. It's merely just another e2e communication between the client and another party, albeit through another protocol.
- jjnoakes 9y agoBut it reveals part of what was typed in the e2e chat to the third party... tls or not is irrelevant to that point.
- jszymborski 9y agoTrue, I overlooked that. Thanks for taking the time to point that out :)
- tinus_hn 9y agoThe app obviously can see the messages, this happens on the clients.
- emilfihlman 9y agoYeah, just tested. I assumed Whatsapp would fetch serverside but no and thus expose client IPs. Telegram seems to proxy the requests. So Whatsapp wins with crypto here.
- ivan_gammel 9y agoTelegram does not encrypt by default. Would be interesting to see, what's happening in encrypted chat there.
- Kpourdeilami 9y agoWouldn't using a proxy also break the E2E? Whoever operates that proxy can see all the requests
- hakcermani 9y agoi guess then they loose the preview feature..