Re:Telegram tries to appease the SEC – no Gram tokens in Mes...
by tinus_hn on Sunday January 12, 2020 @06:09AM
(#22025702)
Regardless of how their encryption is done, if you reregister your phone number you get an sms and you’re in and the complete message history is decrypted. So clearly they have all the keys, otherwise they couldn’t send it to you. Practically it’s not end to end encrypted.
Note that this is the same with many services that claim encryption, for instance Apple.
Re:Telegram tries to appease the SEC – no Gram tokens in Mes...
by giancarlostoro on Sunday January 12, 2020 @11:49AM
(#22027274)
Does apple have the keys or does iMessage just resend as a regular text if you deregister? End to end means only the two parties involved have the keys period.
Re:Telegram tries to appease the SEC – no Gram tokens in Mes...
by tinus_hn on Sunday January 12, 2020 @06:31PM
(#22030511)
For Apple this is with their iCloud backups, storage etc. If you lose the password and your devices it can still be reset.
Re:Telegram tries to appease the SEC – no Gram tokens in Mes...
by giancarlostoro on Sunday January 12, 2020 @12:49AM
(#22024710)
Well I can't remember specifics but I seem to recall somebody pointing to the flaws of their open bounty that it had very specific rules like not MITM'ing someone or something along those lines. Good end to end encryption shouldn't be able to be MITM'd is the thing.
Yes if you see they have an open bounty