News for hackers. Stuff that matters.

A comment on FBI's ability to legally access secure messaging app content and metadata [pdf]. Parent comment

Re:FBI's ability to legally access secure messaging app cont... by Daegalus on Tuesday November 30, 2021 @04:31PM (#29397741)
over the wire is when its encrypted during transmission between the User and Telegram's servers. HTTPS or SSL/TLS, etc. At Rest is when its encrypted in their DBs or hard drives, etc. Theoretically, Telegram can still read the contents if they wished to do so if they setup the appropriate code, or tools inbetween these steps.

E2EE means that the users exchange encryption keys, and they encrypt the data at the client, so that only the other client can decrypt it. Meaning Telegram can never inspect the data if they wanted to.

[ Parent | on HN ]
Re:FBI's ability to legally access secure messaging app cont... by Andrew_nenakhov on Tuesday November 30, 2021 @06:08PM (#29398591)
I very much doubt that Telegram really does encrypt messages "at rest": their server side full text search works extremely fast.
[ Parent | on HN ]
Re:FBI's ability to legally access secure messaging app cont... by Daegalus on Tuesday November 30, 2021 @06:50PM (#29398961)
That's a fair assessment, I didn't make the original claim, just answered the definitions of the encryption states.

I haven't dug enough to know what telegram does or claims to do.

[ Parent | on HN ]