News for hackers. Stuff that matters.

A comment on WhatsApp Rolls Out End-To-End Encryption to Its Over 1B Users. Parent comment

Re:WhatsApp Rolls Out End-To-End Encryption to Its Over 1B U... by n13 on Friday April 08, 2016 @09:05AM (#11454331)
Just wondering what EFF has to say about other Apps like Telegram since code is open sourced [1]?

[1] - https://telegram.org/apps#source-code

[ Parent | on HN ]
Re:WhatsApp Rolls Out End-To-End Encryption to Its Over 1B U... by akvadrako on Friday April 08, 2016 @09:15AM (#11454394)
Telegram wouldn't fair very well. It has weak home-grown encryption and doesn't enable it be default.
[ Parent | on HN ]
Re:WhatsApp Rolls Out End-To-End Encryption to Its Over 1B U... by morsch on Friday April 08, 2016 @09:38AM (#11454534)
They've got two scores for Telegram on their score card[0]: "Telegram" scores poorly (4 out of 7), "Telegram (secret chats)" scores perfectly (7 out of 7). The quality of the encryption algorithm itself doesn't factor into it, though Telegram gets a check for having a recent audit.

Even if the crypto was good, the cognitive load of having to decide whether you want a chat to be secret or not makes it a bad choice IMO, especially if it comes with a downside.

[0] https://www.eff.org/secure-messaging-scorecard

[ Parent | on HN ]
Re:WhatsApp Rolls Out End-To-End Encryption to Its Over 1B U... by tptacek on Friday April 08, 2016 @09:50AM (#11454613)
7/7 being a score that no practicing crypto engineer would be likely to come up with for that application.
[ Parent | on HN ]