teolan
@teolan@lemmy.world
- Comment on Telegram will now hand over your phone number and IP if you’re a criminal suspect 2 months ago:
I didn’t say that there was any network plaintext transfer. I said the server needs to have access to the plaintext at some point.
it doesn’t happen according to them
That’s not actually what they say, because it would be the cryptographic equivalent of claiming they invented a new color.
They talk about encryption at rest without mentioning the rest of their infrastructure to confuse the hell out of people that don’t understand encryption. Given your comments it seems to work.
- Comment on Telegram will now hand over your phone number and IP if you’re a criminal suspect 2 months ago:
Either way the point of telegram is not in privacy for everyone. You trade protection for convenience (cloud data and great clients)
That’s not what their marketing says.
Seeing their user base, it suits most people.
Most people have zero idea what kind of security telegram provides.
- Comment on Telegram will now hand over your phone number and IP if you’re a criminal suspect 2 months ago:
In their explanation it was specifically stated that it should be either impossible or too difficult. Keeping keys and content separately, that’s what it’s about
They’re lying? Encryption at rest does not protect at all against the server snooping around. When you send or receive a message, the server has to see it in plaintext unless you have E2EE. So there is a way for them to access the plaintext of any message you receive, and it happens automatically billions of times per day. It’s pretty easy.
- Comment on Telegram will now hand over your phone number and IP if you’re a criminal suspect 2 months ago:
Telegram’s “encryption” does not protect in any way against dump/search server side (outside of secrets chats).
Telegram’s “encryption” only protects from your ISP spying, and it’s the kind of encryption that everyone implements. Any website that does not implement such encryption would show a big red “Not secure” warning in your browser.