3 ms·
Storing conversations is introducing a massive security hole. One single person in a group can compromise every message from every user. Secure messages should
by hurricanetc 7y ago
Storing conversations is introducing a massive security hole. One single person in a group can compromise every message from every user.
Secure messages shouldn’t persist and if they do they aren’t secure. Being able to export, upload, and restore an entire conversation history is the opposite of secure.
There is no point in using a secure messaging system if your entire conversation history can be downloaded the minute a single person in your group loses physical security on their device. Just use FB Messenger.
- frandroid 7y ago> Storing conversations is introducing a massive security hole. Sure, but that could be up to every sender to decide whether they want their messages to be view once/view for 24hrs/store forever.
- TheSpiceIsLife 7y agoYour comment only makes sense if we assume your security requirements match everyone else’s under all circumstances. This is not likely to be the case.
- lucideer 7y ago> Secure messages shouldn’t persist This is a nice, but ultimately utopic, non-sensical, impossible security requirement. I take your point that anything persistent is insecure, but anything received is potentially persistent. There's no such thing as perfect security, there are only levels. Even a system with some hypothetical form of perfect plausible deniability designed into the receiving end could be compromised via transit metadata. Saying persistence makes secure messaging pointless is pure hyperbole. Encryption protects against a broad range of threat vectors, some simple, others extremely challenging. There's value in every measure.