3 ms·

They could, but I don't think it would really add much benefit. One of the main features of Slack vs IRC is that Slack has persistent and consistent chat histo

They could, but I don't think it would really add much benefit. One of the main features of Slack vs IRC is that Slack has persistent and consistent chat history. If you look at apps like Signal, when you log on from a new device your history isn't available, because of the end to end encryption used to store the messages. To view the history you would have to be able to decrypt it, but that means there has to be some mechanism for users joining a channel for the first time to decrypt the history of that channel (unless you want to break that functionality). Unless there is some really neat cryptography trick I'm not aware of, that would mean you can't have end to end encryption where each user's data is encrypted in a way that is opaque to everyone except user(s) in the chat like Signal or Telegram. Now I guess you could set up some kind of broker system and have like a different encryption key per channel or per conversation or something, which would at least mean some hacker has to get both the archived chats as well as the keys. This would make stealing chat histories more complicated, but not less possible.

yoz-y 7y ago
In iMessage this was possible but all combinations of pairs of your devices had their own keys. When a new device was added you needed to allow it from a device already registered and they would then sync messages device-to-device. This has resulted in quite a lot of mangled histories. Now with iMessage in iCloud, I do not know how the E2E encryption is done.
- konspence 7y ago
  >Now with iMessage in iCloud, I do not know how the E2E encryption is done It isn't done. Apple holds the master keys. The trust is that the iCloud server is not compromised.
  - yoz-y 7y ago
    I've read some discussions and key base articles and it seems that at least the master key is encrypted using your pin code. Not much, but I guess one could use a complex password.
    - konspence 7y ago
      Care to cite? I'm curious
      - yoz-y 7y ago
        https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 > Messages in iCloud also uses end-to-end encryption. If you have iCloud Backup turned on, your backup includes a copy of the key protecting your Messages. This ensures you can recover your Messages if you lose access to iCloud Keychain and your trusted devices. When you turn off iCloud Backup, a new key is generated on your device to protect future messages and isn't stored by Apple. https://pxlnv.com/linklog/improving-imessage-encryption/ https://pxlnv.com/linklog/improving-imessage-encryption/ > During an interview with Apple blogger and Daring Fireball’s owner John Gruber, Federighi said that the company has figured out a way to do syncing while still remaining unable to read your iMessages.
rajbot 7y ago
Slack offers the ability to encrypt messages with your own key, managed in your own AWS KMS account, so chat history and search still work until revoked for a particular channel or time period : https://slack.com/enterprise-key-management https://slack.com/enterprise-key-management

yoz-y 7y ago

In iMessage this was possible but all combinations of pairs of your devices had their own keys. When a new device was added you needed to allow it from a device already registered and they would then sync messages device-to-device. This has resulted in quite a lot of mangled histories. Now with iMessage in iCloud, I do not know how the E2E encryption is done.

konspence 7y ago
>Now with iMessage in iCloud, I do not know how the E2E encryption is done It isn't done. Apple holds the master keys. The trust is that the iCloud server is not compromised.
- yoz-y 7y ago
  I've read some discussions and key base articles and it seems that at least the master key is encrypted using your pin code. Not much, but I guess one could use a complex password.
  - konspence 7y ago
    Care to cite? I'm curious
    - yoz-y 7y ago
      https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303 > Messages in iCloud also uses end-to-end encryption. If you have iCloud Backup turned on, your backup includes a copy of the key protecting your Messages. This ensures you can recover your Messages if you lose access to iCloud Keychain and your trusted devices. When you turn off iCloud Backup, a new key is generated on your device to protect future messages and isn't stored by Apple. https://pxlnv.com/linklog/improving-imessage-encryption/ https://pxlnv.com/linklog/improving-imessage-encryption/ > During an interview with Apple blogger and Daring Fireball’s owner John Gruber, Federighi said that the company has figured out a way to do syncing while still remaining unable to read your iMessages.

rajbot 7y ago

Slack offers the ability to encrypt messages with your own key, managed in your own AWS KMS account, so chat history and search still work until revoked for a particular channel or time period : https://slack.com/enterprise-key-management https://slack.com/enterprise-key-management