Re:Looking back at how Signal works
by Legogris on Friday June 05, 2020 @09:37PM
(#23436029)
The "encrypted at rest" claim is completely meaningless since there's no way of verifying it. If their web client can read your messages by you reverifying your phone number, so can anyone else with access to their servers.
[ Parent
| on HN ]
Re:Looking back at how Signal works
by emptysongglass on Saturday June 06, 2020 @03:03AM
(#23437375)
But that's not true. We can verify a Cloud Chat message is wrapped in a key generated on a user's device. You can look at the client code and prove this. We can also prove that client-server messages must be decrypted on their way back to a user's device. [1]
[1] https://core.telegram.org/mtproto#authorization-and-encrypti...