News for hackers. Stuff that matters.

A comment on Show HN: I built a website to share files and messages without any server. Parent comment

Re:Show HN: I built a website to share files and messages wi... by sneak on Sunday May 05, 2024 @09:46AM (#40264864)
Telegram is not end to end encrypted, and thus not suitable for such uses due to insecurity.
[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by NayamAmarshe on Sunday May 05, 2024 @10:04AM (#40264988)
Telegram has cloud encryption via MTProto 2.0. The servers use a distributed key generation mechanism.
[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by ffpip on Sunday May 05, 2024 @02:10PM (#40266896)
Cloud encryption is just HTTPs + encryption at rest (only claimed, not verified).

They hold the keys, irrespective of how many proprietary protocols they wrap over the message.

A great product tho! I used saved messages extensively!

[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by NayamAmarshe on Monday May 06, 2024 @03:30AM (#40272119)
> Cloud encryption is just HTTPs + encryption at rest

Not just plain-old HTTPs. MTProto 2.0 is a whole encryption algorithm for Cloud chats: https://core.telegram.org/mtproto/AJiEAwIYFoAsBGJBjZwYoQIwFM...

[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by ffpip on Monday May 13, 2024 @06:44AM (#40341680)
In the end, they hold the keys irrespective of how many algorithms they wrap on top.

I do not feel it is any different from Google Chat, Twitter DMs, etc. They do have a lot of censorship resistant and anti-MITM attack features in between, but they hold the keys by default

I use it for convenience and amazing features, not for security!

[ Parent | on HN ]