3 ms·
The best approximation of security in this space should be an open-implementation of an open-source protocol that can be easily audited. As far as I know, the
by warp_factor 7y ago
The best approximation of security in this space should be an open-implementation of an open-source protocol that can be easily audited.
As far as I know, the only app that fits this requirement with a minimum viable community such that it can be used day to day is Signal.
- pentaphobe 7y agoExactly. Another positive is Signal have been very intentionally slow and transparent about security considerations when it comes to adding new features (gif search, link previews) Telegram appear to be more focused on feature parity with competitors than "crushing the core" of secure messaging
- abeppu 7y agoReal questions, which will sound like a conspiracy theory: - Is being open source, and some eager and independent security researchers having done an audit enough to convince you (or some other well-informed part on the thread) that no clever flaws are intentionally in the source? - Do the funding or institutions which support the development of a piece of tech change the answer to the above question? E.g. I've been encouraged to avoid Signal b/c it was created partly with US State Dept funding (via the Open Technology Fund). The main point made during that conversation was that the US supports projects like Signal and Tor as a means of supporting dissidents in other countries. But a side implication was that it may be naive to rely on tools (indirectly) provided by the state to avoid surveillance by the state.
- warp_factor 7y agoThe way I view this, funding can definitely raise suspicion. But The open sourcing of the protocols should help to remove those suspicions.
- kayoone 7y agoStill Telegram is good enough. It is feature rich, offers good security if you want and most importantly has no ties to FB or Google.