Live data from Hacker News

Ask HN: Best encrypted messaging app atm?

news.ycombinator.com

51–60 of 90 posts

Re: Ask HN: Best encrypted messaging app atm?

#51
post #36

Aren't all of them encrypted now? I'm using telegram

WhatsApp is also encrypted, but it does share your data with Facebook. So while end-to-end encryption always sounds secure, it not always is.

Yes, this was what led me to now look for an alternative to WhatsApp.

Re: Ask HN: Best encrypted messaging app atm?

#52

I like https://wire.com and https://threema.ch/en

Wire was in the middle of a shitstorm a while back iirc because it falsly advertised that it encrypted everything end-to-end, when in actual fact only text was so.

Here's a source: http://www.pcworld.com/article/2855745/new-communications-ap...

My mistake. Text isn't end-to-end, only calls are.

Re: Ask HN: Best encrypted messaging app atm?

#54
post #19

Earlier quoted context omitted.

That article recommends Tor for browsing without mentioning the dangers involved. Malicious exit nodes are not hypothetical. It's easy to make mistakes with Tor, so I'd be wary of a general recommendation to use it. People who know more about this than me seem to agree: https://twitter.com/thegrugq/status/797608924606173184 edit: I'm also unsure about the warning against fingerprint authentication. I use Touch ID wit…

The exact same dangers exist with normal browsing. Intermediate nodes on your route can do whatever they want unless you use proper encryption. In fact, things like sniffing your traffic are routinely done by $ThreeLetterAgency.

Your argument is a classical example of "correct in theory, wildly misleading in practice". As you can see on https://trac.torproject.org/projects/tor/wiki/doc/badRelays (list isn't updated any more, so the real list is likely much longer) or http://www.cs.kau.se/philwint/spoiled_onions/techreport.pdf, there have been several cases where relays actively interfered with user traffic in a malicious way. Malicious exit nodes are used to MitM connections and sniff sensitive data.

Note that Tor doesn't mitigate the three-letter agency problem, as they can just sniff the exit node's target (I certainly would, there's bound to be lots of interesting traffic there).

Re: Ask HN: Best encrypted messaging app atm?

#55
post #26

Check out the EFF's Secure Messaging Scorecard: https://www.eff.org/node/82654 Personally I use Signal and Whatsapp from that list.

Whatsapp as secure messaging? Sure.

You may be interested in: https://whispersystems.org/blog/whatsapp-complete/

Re: Ask HN: Best encrypted messaging app atm?

#56

Earlier quoted context omitted.

Wire was in the middle of a shitstorm a while back iirc because it falsly advertised that it encrypted everything end-to-end, when in actual fact only text was so.

Here's a source: http://www.pcworld.com/article/2855745/new-communications-ap... My mistake. Text isn't end-to-end, only calls are.

The current Privacy page[1] seems to indicate that, at least now, text, image and voice is end-to-end encrypted.

[1]: https://wire.com/privacy/

Re: Ask HN: Best encrypted messaging app atm?

#57
post #50
post #21

At the moment, Signal and Wire seem to be the best options. They have open-source clients, end-to-end encryption, are easy enough to use that even less-computer savy people can be realistically convinced to use them and they seem to offer decent protection for metadata (not technical, but policy-wise). There are, however, some upcoming developments which will change the situation in the next couple of months: 1) The…

I've heard Signal has US Government backing, which makes me scared for an NSA backdoor. Any idea about this?

Where have you heard this? I wouldn't question Moxie's integrity lightly, his track record is impressive.

Re: Ask HN: Best encrypted messaging app atm?

#58
post #42
post #30

Earlier quoted context omitted.

Encrypted video calls will crush mobile CPUs in my opinion, but indeed it would be nice to have one.

I'm curious if you have some real insight on this, because my understanding is that Facetime video calls are end-to-end encrypted, and the battery drain seems to be pretty minimal even on older devices.

What's your definition of "pretty minimal"? FaceTime has noticeable battery usage in my experience, but it's not excessive. I'm not sure how it compares to unencrypted video chat, but I doubt it's much higher. Crypto is typically accelerated in mobile devices these days. I would guess that the screen and network (Modem/wifi active all the time) are the battery-draining bits, and while encoding and encryption don't help, they're hardware-accelerated. That's only a guess, though, and I'd appreciate it if anyone had data on this.

Re: Ask HN: Best encrypted messaging app atm?

#59
post #15

This is a vague question: it depends entirely on the protocol you're about to use. I'll try to give a few answers anyway. First of all, if you want total encryption, you'll need to make sure your connection is encrypted and secured as well (meaning following you back is not trivial), so the whole messaging should go through Tor[1]. There are plugin solutions for bitlbee[2], for Pidgin[3], and many other clients suppo…

Downvoted? Sometimes I don't understand people. Please give a reason.
Post reply on HN