News for hackers. Stuff that matters.
Re:Why Telegram is insecure (2015) by TACIXAT on Sunday January 06, 2019 @12:16PM (#18839314)
Let me preface this by saying I work in security and use Signal. That said, the security industry can be incredibly obtuse at times. End users don't care. Full stop. Having the best encryption isn't a selling point to the masses. I'm making a chat app right now and I'm doing it exactly the same way as Telegram, unencrypted by default with an E2E private chat option. Why? Search. I don't need E2E. I use it based on principle. I do need to be able to search my conversations. As long as the chat provider is trusted, I'm happy to have my messages in plain text to be searchable and I think 99% of end users feel the same way.
Re:Why Telegram is insecure (2015) by nitrogen on Sunday January 06, 2019 @12:17PM (#18839322)
Why can't search be done entirely client side?
Re:Why Telegram is insecure (2015) by TACIXAT on Sunday January 06, 2019 @12:49PM (#18839491)
It could, with IndexedDB or similar, but then you have a massive conversation history being stored on user devices. Space is a precious commodity on phones.
Re:Why Telegram is insecure (2015) by xashor on Sunday January 06, 2019 @01:02PM (#18839581)
For text? Nah. Most apps automatically store photos on your device, and that's fine. Mobile phones have several GB for storage. That is enough for hundred thousands of messages, before even noticeable. Please reconsider your E2E policy and don't make the world a more insecure place.