4 ms·
The journalist is just wrong. Security professionals don't warn against it because it doesn't encrypt by default, they warn against it because Telegram wrote t
by tw04 6y ago
The journalist is just wrong. Security professionals don't warn against it because it doesn't encrypt by default, they warn against it because Telegram wrote their own encryption protocol and they haven't allowed an outside audit. Basically "trust us we know what we're doing.
If something has changed feel free to correct me, but as far as I know MTProto is still all in-house closed source code and hasn't ever been audited.
https://eprint.iacr.org/2015/1177.pdf https://eprint.iacr.org/2015/1177.pdf
- akvadrako 6y agoThere was some analysis done recently, though not being a crypto expert I don't know how relevant it is: https://news.ycombinator.com/item?id=25722076#25724978 https://news.ycombinator.com/item?id=25722076#25724978 One note: Telegram doesn't need to "allow" experts to audit their code - E2E is all in the clients which have source available. I don't think it's had enough scrutiny to be trustworthy though.
- lozf 6y ago> E2E is all in the clients But only mobile clients, no E2E on the desktop or for groups sadly.
- nguyenkien 6y agoMac client has it. The one written with swift. In Windows you have Unigram (unofficial, but opensource)
- lozf 6y agoInteresting thanks. Maybe it'll get to Linux one day then. Not that I'm too fussed, I use telegram for larger groups mostly, and secure chats on Signal.
- s_dev 6y agoI'm aware "roll your own crypto" is bad practice but MTProto is open to being inspected: https://core.telegram.org/mtproto https://core.telegram.org/mtproto https://github.com/tdlib/td/tree/80c35676a2eb1e9b71db355ee217bba79fbdce31/td/mtproto https://github.com/tdlib/td/tree/80c35676a2eb1e9b71db355ee21...