4 ms·

I've used Discord for a long time and my previous startup was even part of the Hypesquad program. However, I'm really concerned with their views around E2E encr

I've used Discord for a long time and my previous startup was even part of the Hypesquad program. However, I'm really concerned with their views around E2E encryption. We've asked many times for an end-to-end encryption service. This became the #3 most upvoted request (https://support.discordapp.com/hc/en-us/community/posts/360030084532-Implement-WhisperSystems-Encryption-for-Voice-and-Text https://support.discordapp.com/hc/en-us/community/posts/3600...). Unfortunately, their "rejection" and user comments were deleted after they switched feature request systems. It was something along the lines of "we take security seriously but we won't do this." IMO, it's pretty important for them to actually consider implementing this.

dillondoyle 8y ago
Unless they need to read the content of messages for advertising
skrebbel 8y ago
It's extremely hard to get e2e right and still have great UX when your product revolves around semipublic group chats.
- foepys 8y ago
  I'd argue that it's actually impossible if the target group is not technically skilled. Discord has too many different clients, just the key exchange would be a nightmare for the average person. TeamSpeak tried to use keys for their profile management but everybody I know just simply regenerates their keys when they freshly install TeamSpeak, so it's effectively useless when combined with E2E encryption.
nikanj 8y ago
Pretty much every major messaging product with e2e encryption has had child pornography and terrorism claims made against it. Maybe they want to avoid that publicity, even if it costs them some of the most paranoid users?
- int_x 8y ago
  Thats what their "excuse" is, yes. https://www.reddit.com/r/discordapp/comments/8nzb5d/comment/e001lr1 https://www.reddit.com/r/discordapp/comments/8nzb5d/comment/... To be honest, I agree with the people saying that this isnt discords responsibility. The real baddies are already using other services, and IIRC Discord has handed over user data for other cases as well
reciprocity 8y ago
In addition to this, they've also locked the ability for users to vote for this feature so even if you do sign in, you can't vote for end to end encryption to be implemented.

dillondoyle 8y ago

Unless they need to read the content of messages for advertising

skrebbel 8y ago

It's extremely hard to get e2e right and still have great UX when your product revolves around semipublic group chats.

foepys 8y ago
I'd argue that it's actually impossible if the target group is not technically skilled. Discord has too many different clients, just the key exchange would be a nightmare for the average person. TeamSpeak tried to use keys for their profile management but everybody I know just simply regenerates their keys when they freshly install TeamSpeak, so it's effectively useless when combined with E2E encryption.

nikanj 8y ago

Pretty much every major messaging product with e2e encryption has had child pornography and terrorism claims made against it. Maybe they want to avoid that publicity, even if it costs them some of the most paranoid users?

int_x 8y ago
Thats what their "excuse" is, yes. https://www.reddit.com/r/discordapp/comments/8nzb5d/comment/e001lr1 https://www.reddit.com/r/discordapp/comments/8nzb5d/comment/... To be honest, I agree with the people saying that this isnt discords responsibility. The real baddies are already using other services, and IIRC Discord has handed over user data for other cases as well

reciprocity 8y ago

In addition to this, they've also locked the ability for users to vote for this feature so even if you do sign in, you can't vote for end to end encryption to be implemented.