News for hackers. Stuff that matters.

A comment on Why Telegram is insecure (2015). Parent comment

Re:Why Telegram is insecure (2015) by pgeorgi on Sunday January 06, 2019 @10:45AM (#18838839)
So you'd have the account setup flow but still on a single server only few can control.

I'd prefer to see people go for a federated system (eg XMPP with OMEMO for E2E crypto) or work on truly decentralized ones (that one is hard, and blockchain is not a trivial solution ;-) ) rather than propose yet another system where somebody else can control who you can talk to (even if they can't see what you're talking about) as a replacement for the previous system with the very same properties, just ran by a different party.

[ Parent | on HN ]
Re:Why Telegram is insecure (2015) by thefounder on Monday January 07, 2019 @08:19AM (#18844859)
At least you would have end to end encryption using a protocol regarded as secure. Descentalization would be the next step.
[ Parent | on HN ]
Re:Why Telegram is insecure (2015) by pgeorgi on Tuesday January 08, 2019 @09:42AM (#18855756)
OMEMO is based on the Signal Protocol, and there's some discussion[0] about the effect of the changes.

So in a way this is Signal Protocol (the one "regarded as secure") with that "next step" of adding decentralization already taken.

[0] https://conversations.im/omemo/audit.pdf

[ Parent | on HN ]