In reply to:
Alex Conner –
@gRegorLove Basically, the only way to get security is something like Threema which allows manual key verification out of band.
Alex Conner –
@gRegorLove I'm happy enough with it being significantly more secure than Hangouts, SMS and Email.
Alex Conner –
@gRegorLove Absolute privacy is super inconvenient. ;-)
gRegor Morrill –
@codatory That’s cool. I’m mostly concerned about them rolling their own crypto and it getting wide adoption.
gRegor Morrill –
@codatory I haven’t checked them out in-depth, but my understanding was iMessage/TextSecure use better crypto.
Alex Conner –
@gRegorLove The crypto is the same, it's all AES/DiffeHelman, it's the protocol that's questionable.
Alex Conner –
@gRegorLove with iMessage a compromised server can send an extra key and boom, access to encrypted data.
@codatory Not very secure, though. http://security.stackexchange.com/questions/49782/is-telegram-secure
Responses
@gRegorLove Basically, the only way to get security is something like Threema which allows manual key verification out of band.
@gRegorLove I'm happy enough with it being significantly more secure than Hangouts, SMS and Email.
@gRegorLove Absolute privacy is super inconvenient. ;-)
@codatory That’s cool. I’m mostly concerned about them rolling their own crypto and it getting wide adoption.
@codatory I haven’t checked them out in-depth, but my understanding was iMessage/TextSecure use better crypto.
@gRegorLove The crypto is the same, it's all AES/DiffeHelman, it's the protocol that's questionable.
@gRegorLove with iMessage a compromised server can send an extra key and boom, access to encrypted data.
@gRegorLove Secret chat is available (and as far as anyone knows quite secure). Otherwise it's on-par with iMessage security.