5 ms·
For somebody who isn’t super cyprtography-savvy, what’s the difference between over the wire and e2ee? Does the former mean that telegram itself can read non-pr
by 542458 5y ago
For somebody who isn’t super cyprtography-savvy, what’s the difference between over the wire and e2ee? Does the former mean that telegram itself can read non-private-chat messages if it so chooses?
- Gigachad 5y agoPretty much. End to end uses the encryption keys of both _users_ to send. Over the wire has both sides use the platforms keys so the platform decrypts, stores in plain text, and sends it encrypted again to the other side. Over the wire is basically just HTTPS.
- Daegalus 5y agoover the wire is when its encrypted during transmission between the User and Telegram's servers. HTTPS or SSL/TLS, etc. At Rest is when its encrypted in their DBs or hard drives, etc. Theoretically, Telegram can still read the contents if they wished to do so if they setup the appropriate code, or tools inbetween these steps. E2EE means that the users exchange encryption keys, and they encrypt the data at the client, so that only the other client can decrypt it. Meaning Telegram can never inspect the data if they wanted to.
- Andrew_nenakhov 5y agoI very much doubt that Telegram really does encrypt messages "at rest": their server side full text search works extremely fast.
- Daegalus 5y agoThat's a fair assessment, I didn't make the original claim, just answered the definitions of the encryption states. I haven't dug enough to know what telegram does or claims to do.
- loeg 5y agoYeah, if you connect to https://facebook.com https://facebook.com and use messenger, it's encrypted over the wire because you're using HTTPS (TLS). But it's not E2EE.
- andreyf 5y agoyes. worth remembering also that even with e2ee, a ad-tech-driven company could have endpoints determine marketing segments based on content of conversations ad report those to the company to better target ad spend.
- skinkestek 5y agoAlso, as is the case with WhatsApp, they siphon off your metdata and even have the gall to make an agreement with Google to download message content unencrypted to Google when one enable backups.
- skinkestek 5y ago> For somebody who isn’t super cyprtography-savvy, what’s the difference between over the wire and e2ee? E2EE: As long as it is correctly set up and no significant breakthroughs happens in math, nobody except the sender, the receiver can read the messages. > Does the former mean that telegram itself can read non-private-chat messages if it so chooses? Correct. They say they store messages encrypted and store keys and messages in different jurisdictions, effectively preventing themselves from abusing it or being coerced into giving it away, but this cannot be proven. If your life depends on it, use Signal, otherwise use the one you prefer and can get your friends to use (preferably not WhatsApp though as it leaks all your connections to Facebook and uploads your data unencrypted to Google for indexing(!) if you enable backups. Edited to remove ridiculously wrong statement, thanks kind SquishyPanda23 who pointed it out.
- SquishyPanda23 5y ago> nobody except the sender, the receiver and the service provider can read the messages E2EE means the service provider cannot read the messages. Only the sender and receiver can.
- skinkestek 5y agoThanks! I edited a whole lot and that came out ridiculously wrong! :-)
- SquishyPanda23 5y agoHaha, no problem. I do that a lot too :)
- skinkestek 5y agoForgot to upvote you yesterday, done now ;-)