3 ms·
End-to-end-encrypted means without significant, unexpected breakthroughs in mathematics, no one can read it between the sender and the recipient, even if the tr
by eitland 4y ago
End-to-end-encrypted means without significant, unexpected breakthroughs in mathematics, no one can read it between the sender and the recipient, even if the traffic pass through FSB, NSA, Telegram, Google and Facebook headquarters and they all conspire to break it.
Point-to-point-encrypted means it can theoretically[1] be read by the vendor (Telegram in this case) or anyone who can coerce the vendor. This is the standard for mail, online banking etc.
The reason for providing both end-to-end-encrypted and point-to-point-encrypted is that point-to-point-encryption is significantly simpler, which makes it easiee to create useful and or cool features.
[1]: vendors can do a nunber of things to make it hard/next to impossible for employees and others to access data, like for example restricting access to user data to service accounts, only allow debugging access in special circumstances and auditing such debugging access.
Telegram used to claim they solve it by sending/storing encrypted data through/in different data centers from the keys, and keeping these days centers in different jurisdictions. Done properly should mean that two or more employees across the company would have to conspire to get access to customer data, or two or more judges in different countries would have to demand data.
But unlike with end-to-end-encryption we have to take their word for it.