4 ms·

Do you have some links regarding their disastrous encryption? The security guys i know speak highly of telegram and AFAIK it has been open sourced recently, but

by domano 6y ago

Do you have some links regarding their disastrous encryption? The security guys i know speak highly of telegram and AFAIK it has been open sourced recently, but i am open to new information.

utf_8x 6y ago
The Telegram backend is still closed-source as far as I know. The problem with their crypto is that nobody really knows if it's secure or not because it's closed and unverified. Ever heard the first rule of encryption? "Never roll your own crypto". Well they broke the rule and they won't let anyone check if the crypto is secure or not. Not to mention encryption is off by default and your plaintext messages are stored on their servers...
- blehn 6y ago
  Cite some sources. They clearly do not store your messages in plaintext on their servers https://telegram.org/privacy#3-3-your-messages https://telegram.org/privacy#3-3-your-messages https://telegram.org/privacy#4-1-storing-data https://telegram.org/privacy#4-1-storing-data
  - fsflover 6y ago
    > in plaintext They have the encryption key, so the difference is not huge.
    - blehn 6y ago
      Stored on different servers in different jurisdictions, right? Sure it's not ideal if you want maximum security of your data, but it _is_ a huge difference from simply storing plain text.
domano 6y ago
I do apologize, i had Threema in my mind and mixed them up.