this post was submitted on 29 Aug 2024
400 points (97.8% liked)

Technology

60070 readers
5347 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] KairuByte@lemmy.dbzer0.com 6 points 3 months ago* (last edited 3 months ago) (4 children)

To be clear, it’s encrypted*.

* If you enable it

[–] Deello@lemm.ee 19 points 3 months ago (1 children)

Recent events have taught me that only individual chats are encrypted*. Group chats don't have that feature.

[–] Geth@lemmy.dbzer0.com 10 points 3 months ago (1 children)

In telegram nothing is e2e encrypted unless you specifically ask it to be and when you do, it kills all the functionality that makes it better than others.

[–] Deello@lemm.ee 3 points 3 months ago

That's what I said. The person I replied to said that all messages are encrypted* with the asterisk being only if you specifically enable it. I clarified that it doesn't apply to group chats though. I don't use Telegram so the loss of functionality is actually a bigger deal to me than the argument around E2EE. Can you explain what features are lost when you enable it? It's a messaging app so I'm curious what you sacrifice for E2EE.

[–] BearOfaTime@lemm.ee 13 points 3 months ago

Telegram groups are not E2E.

Chats are encrypted, but the servers hold the encryption keys (I believe).

There are one-to-one chats that are full e2e, but you have to enable it. And it has all sorts of compromises.

Qualifier: this is as dicumented by telegram. Since it's not open source, we can't really verify it

[–] uzay@infosec.pub 9 points 3 months ago (2 children)

There is no point in encrypting a public group chat since anyone can join and decrypt it anyway.

[–] KairuByte@lemmy.dbzer0.com 8 points 3 months ago

The secret chats feature isn’t between anyone I believe, it’s between two people. But I don’t actually know for certain because I’ve not looked into it beyond a cursory googling.

That said, you’d be correct in that just like any service out there, the moment you let random people join there’s no level of encryption that can keep your secrets secret.

[–] sugar_in_your_tea@sh.itjust.works 1 points 3 months ago (1 children)

It works well in Matrix, and you can restrict who joins on that platform.

[–] uzay@infosec.pub 1 points 3 months ago (1 children)

If you restrict it, then it isn't public. I'm not saying that encrypted group chats are useless. But if it is public and anyone can join anyway, then encryption adds no secrecy.

Right, I'm just saying that other platforms give you the option of E2EE group chats, which makes sense if you know your group will remain fixed to a certain size. For truly public groups, yeah, encryption just adds a lot of processing overhead without much benefit.

I, personally, would prefer a platform that gives me the option rather than doesn't.

[–] datendefekt@lemmy.ml 1 points 3 months ago

AFAIK chat contents are stored unencrypted on the server.