4 ms·

IMO it works just as well and unlike Telegram it's actually credible... The telegram crypto is an absolute disaster and they have been pretty shady and defensiv

by utf_8x 6y ago

IMO it works just as well and unlike Telegram it's actually credible... The telegram crypto is an absolute disaster and they have been pretty shady and defensive when asked about it in the past. Not to mention the back-end is closed-source. Also, the desktop clients still don't support encryption, many years after it's been first requested.

domano 6y ago
Do you have some links regarding their disastrous encryption? The security guys i know speak highly of telegram and AFAIK it has been open sourced recently, but i am open to new information.
- utf_8x 6y ago
  The Telegram backend is still closed-source as far as I know. The problem with their crypto is that nobody really knows if it's secure or not because it's closed and unverified. Ever heard the first rule of encryption? "Never roll your own crypto". Well they broke the rule and they won't let anyone check if the crypto is secure or not. Not to mention encryption is off by default and your plaintext messages are stored on their servers...
  - blehn 6y ago
    Cite some sources. They clearly do not store your messages in plaintext on their servers https://telegram.org/privacy#3-3-your-messages https://telegram.org/privacy#3-3-your-messages https://telegram.org/privacy#4-1-storing-data https://telegram.org/privacy#4-1-storing-data
    - fsflover 6y ago
      > in plaintext They have the encryption key, so the difference is not huge.
      - blehn 6y ago
        Stored on different servers in different jurisdictions, right? Sure it's not ideal if you want maximum security of your data, but it _is_ a huge difference from simply storing plain text.
- domano 6y ago
  I do apologize, i had Threema in my mind and mixed them up.
j-james 6y ago
Telegram's MTProto 2.0 encryption protocol was recently proved correct, but I haven't seen any peer review or discussion on the paper yet. https://arxiv.org/abs/2012.03141 https://arxiv.org/abs/2012.03141

by utf_8x 6y ago

domano 6y ago

Do you have some links regarding their disastrous encryption? The security guys i know speak highly of telegram and AFAIK it has been open sourced recently, but i am open to new information.

utf_8x 6y ago
The Telegram backend is still closed-source as far as I know. The problem with their crypto is that nobody really knows if it's secure or not because it's closed and unverified. Ever heard the first rule of encryption? "Never roll your own crypto". Well they broke the rule and they won't let anyone check if the crypto is secure or not. Not to mention encryption is off by default and your plaintext messages are stored on their servers...
- blehn 6y ago
  Cite some sources. They clearly do not store your messages in plaintext on their servers https://telegram.org/privacy#3-3-your-messages https://telegram.org/privacy#3-3-your-messages https://telegram.org/privacy#4-1-storing-data https://telegram.org/privacy#4-1-storing-data
  - fsflover 6y ago
    > in plaintext They have the encryption key, so the difference is not huge.
    - blehn 6y ago
      Stored on different servers in different jurisdictions, right? Sure it's not ideal if you want maximum security of your data, but it _is_ a huge difference from simply storing plain text.
domano 6y ago
I do apologize, i had Threema in my mind and mixed them up.

j-james 6y ago

Telegram's MTProto 2.0 encryption protocol was recently proved correct, but I haven't seen any peer review or discussion on the paper yet. https://arxiv.org/abs/2012.03141 https://arxiv.org/abs/2012.03141