3 ms·
>Are you referring to the "scan this QR code to verify your partner's key" function in secure messaging apps? Yes. Or read the weird numbers/letters over the p
by upofadown 6y ago
>Are you referring to the "scan this QR code to verify your partner's key" function in secure messaging apps?
Yes. Or read the weird numbers/letters over the phone. Or look at the strange image and compare it somehow.
For all I know there is something out there that wants you to compare a tune...
- DaiPlusPlus 6y agoThat still requires you to trust the client software. I trust Telegram’s E2E, but not Zoom - unless Zoom’s client is on GitHub with deterministic build steps?
- mr_mitm 6y agoTelegram's crypto is shoddy [1]. It may not be a complete train wreck, but if you value good crypto and privacy, Signal is probably your only option. It also offers E2EE group chats, unlike Telegram. [1] https://security.stackexchange.com/a/49802/29703 https://security.stackexchange.com/a/49802/29703 (a bit dated but AFAIK nothing changed)
- BlueTemplar 6y agoI guess that still need to trust Signal's centralized servers, located in the USA, to not give away your metadata ?
- upofadown 6y ago>a bit dated... A lot dated. The current thing is described here: * https://core.telegram.org/mtproto https://core.telegram.org/mtproto