4 ms·
A lot of users just think that Telegram is E2EE by default. I really don't see why a user would make a conscious choice to activate E2EE on Telegram but not ver
by hiq 6y ago
A lot of users just think that Telegram is E2EE by default. I really don't see why a user would make a conscious choice to activate E2EE on Telegram but not verify the fingerprints on Signal. In both cases a manual step is involved.
As others have pointed out, there's no good reason to have no E2EE by default in 2020.
Signal also protects against a whole lot of passive attacks (e.g. bulk collection), which Telegram doesn't. Any vulnerability in Telegram's servers and all your chat history is made public. I don't know how Signal secures their servers, and I don't have to care.
Security-wise there's no good reason to use Telegram vs Signal.
- wyuenho 6y agoThere sure are many technical reasons to not have e2ee by default. In Signal, at least as recently as in August, you may still get messages from the group you just quit if a member send a message to the group before the group metadata is reconciled. This happens because every group message is an e2ee message to every other group member. If you have signed in from two devices, disappearing messages that have disappeared on one device will still show up on another. This happens because the server cannot store or sync the states of two sessions participating in the same chat. Signal is full of little distributed system data consistency bugs that you just wouldn't expect in traditional client-server model application.