3 ms·

Matrix already has solved it. Message history is stored on the servers, like in Telegram. With the difference, that the end user has a secret. This secret can

Matrix already has solved it. Message history is stored on the servers, like in Telegram. With the difference, that the end user has a secret. This secret can be written down/saved and/or be implicitly passed through his/her own devices by e.g. scanning a QR code. This works simultaneously across arbitrary platforms with arbitrary many devices including web. Telegram seems to want to create the illusion that there is nothing which can provide the experience of Telegram with encryption. It is not true.

meibo 6y ago
Matrix seems to be the best implementation of this I've seen up to now, I agree. Even just giving you the option to upload to Drive or iCloud, while allowing you to keep the key yourself on a note or another device, would be a step in the right direction for an app like WhatsApp that has no "messages" on the server at all after delivery(or so it always used to work, not sure if it's still the case - my GDPR export from yesterday literally only had my profile picture and contacts).
mmis1000 6y ago
If you requires them to write down or print, then there will be people just not do it and still lost their data all together. If you just infer it from user password. Someone is definitely going to use weak password and get cracked in seconds. If you requires a strict password rule to enforce strong password, someone is going to forget it and lock them out of their account. Because they only use this password here and there is literally no reason you use it the second time(most people only login from 1 device. Unless it is broken, you are not going to login the second time). Requires a physical device is also a no go. Because devices can break. Unless you have another backup, you are screwed. I am not sure there is a method that is secure(that don't lost message by accident) to most of the users. Lost messages and contacts is way more risky then your message may be seen by CIA to most users, I believe.

meibo 6y ago

Matrix seems to be the best implementation of this I've seen up to now, I agree. Even just giving you the option to upload to Drive or iCloud, while allowing you to keep the key yourself on a note or another device, would be a step in the right direction for an app like WhatsApp that has no "messages" on the server at all after delivery(or so it always used to work, not sure if it's still the case - my GDPR export from yesterday literally only had my profile picture and contacts).

mmis1000 6y ago

If you requires them to write down or print, then there will be people just not do it and still lost their data all together. If you just infer it from user password. Someone is definitely going to use weak password and get cracked in seconds. If you requires a strict password rule to enforce strong password, someone is going to forget it and lock them out of their account. Because they only use this password here and there is literally no reason you use it the second time(most people only login from 1 device. Unless it is broken, you are not going to login the second time). Requires a physical device is also a no go. Because devices can break. Unless you have another backup, you are screwed. I am not sure there is a method that is secure(that don't lost message by accident) to most of the users. Lost messages and contacts is way more risky then your message may be seen by CIA to most users, I believe.