4 ms·

They use perfect forward secrecy through OLM, no?

• blendergeek 5y ago
  "Perfect Forward Secrecy", better termed "Forward Secrecy", allows old messages to remain secret even if the long-term secrets are leaked. If current cryptographic primitives are fundamentally broken, all data can be decrypted if it is saved. This is why it is safest to destroy everything if you are worried about threats in the distant future.
  • hellcow 5y ago
    Got it. So the concern is that there's no support for time-based deletion of messages? That is on their public roadmap, and I think it's reasonable to assume that'll be deployed before modern ECC is broken. Or am I misunderstanding the concern?
    • goodpoint 5y ago
      You cannot delete encrypted data once it has been shared with the whole world.
      • kitkat_new 5y ago
        messages don't get shared with the whole world, but only the users and the homeservers the users choose
    • blendergeek 5y ago
      The main concern is that the encrypted data is stored on the server long-term. The longer it is on the server, the more likely it becomes that it is saved by an adversary. If data is only stored for a minimal amount of time, we lower the risk of an adversary acquiring it
    • foresto 5y ago
      > time-based deletion of messages? That is on their public roadmap, How can deletion of a sent message be enforced? I realize that some messaging services offer this feature, but aren't they all misleading at best? Even on a centralized service with a trustworthy admin, the recipient can always copy/paste or take a screen shot.