4 ms·
The "encrypted at rest" claim is completely meaningless since there's no way of verifying it. If their web client can read your messages by you reverifying your
by Legogris 6y ago
The "encrypted at rest" claim is completely meaningless since there's no way of verifying it. If their web client can read your messages by you reverifying your phone number, so can anyone else with access to their servers.
- emptysongglass 6y agoBut that's not true. We can verify a Cloud Chat message is wrapped in a key generated on a user's device. You can look at the client code and prove this. We can also prove that client-server messages must be decrypted on their way back to a user's device. [1] [1] https://core.telegram.org/mtproto#authorization-and-encryption https://core.telegram.org/mtproto#authorization-and-encrypti...