Re:Why Telegram is insecure (2015)
by thefounder on Sunday January 06, 2019 @09:00AM
(#18838326)
Someone should simply fork signal and deploy an app without phone number, focused on privacy(i.e options to exchange keys in person without any user account or phone number)
[ Parent
| on HN ]
So you'd have the account setup flow but still on a single server only few can control.
I'd prefer to see people go for a federated system (eg XMPP with OMEMO for E2E crypto) or work on truly decentralized ones (that one is hard, and blockchain is not a trivial solution ;-) ) rather than propose yet another system where somebody else can control who you can talk to (even if they can't see what you're talking about) as a replacement for the previous system with the very same properties, just ran by a different party.
Re:Why Telegram is insecure (2015)
by thefounder on Monday January 07, 2019 @08:19AM
(#18844859)
At least you would have end to end encryption using a protocol regarded as secure. Descentalization would be the next step.
OMEMO is based on the Signal Protocol, and there's some discussion[0] about the effect of the changes.
So in a way this is Signal Protocol (the one "regarded as secure") with that "next step" of adding decentralization already taken.
Maybe you want Tox