3 ms·
"Ephemeral" messages, the way Snapchat does it, is useless against surveillance and possibly even other kind of hacking later on if the company is actually savi
by higherpurpose 13y ago
"Ephemeral" messages, the way Snapchat does it, is useless against surveillance and possibly even other kind of hacking later on if the company is actually saving the content on its servers. Perfect forward secrecy is a much better way to have "ephemeral" conversations, even if the encrypted data remains stored.
Adding self-deletion on top of that just makes it slightly better in case someone wants to decrypt those messages later, even though it should be an almost impossible task.
So if apps want to offer safe conversations for users, they should first implement end to end security and perfect forward secrecy either with OTR or TextSecure's protocol. If they want to add self-deletion on top of that mainly as a marketing feature, that's fine, but it shouldn't be the main priority.
- deleted 13y ago[deleted]
- drdaeman 13y agoPFS doesn't help if one of the parties is leaking information. And, I guess, in case of Snapchat, [at least most] leaks are from the participating users, not the service. No amount of crypto would prevent malicious party from picking up a camera and taking a photo of the screen.
- deleted 13y ago[deleted]