Signal has this as well. I trust their security (personal bias), but unfortunately the call quality is a non-starter at the moment.
Voice Calls: Secure, Crystal-Clear, AI-Powered
51–60 of 299 posts
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#52Earlier quoted context omitted.
iMessage has end to end encryption and supports multiple devices. Each device uses its own keypair and when a message is sent, it is sent encrypted for each of the recipient's devices. https://www.apple.com/business/docs/iOS_Security_Guide.pdf
The hard part is how do you manage a list of trusted devices. The thing which is really sad is that there are no end to end encrypted group chats.
> The thing which is really sad is that there are no end to end encrypted group chats.
In iMessage specifically, or in general? WhatsApp/Signal do use E2E-crypto for group chats.
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#53Signal has this as well. I trust their security (personal bias), but unfortunately the call quality is a non-starter at the moment.
They've rolled out a new version of video/voice calls this month[1] which supposedly improved the quality quite a bit. I haven't personally tried it yet, though.
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#54In a world full of bloated Electron HTML5 / JS "desktop apps", I'm very happy to see Telegram on Windows is a native app (Qt). It feels so incredibly responsive compared to everything else.
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#55I'm using Telegram as my main messaging system but I hope they'll open source everything. That's the only way to fully audit the service. Telegram is not too bad but has too many grey areas at this moment.
Client and protocol are open source. What more do you need?
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#56I'm using Telegram as my main messaging system but I hope they'll open source everything. That's the only way to fully audit the service. Telegram is not too bad but has too many grey areas at this moment.
How do you ensure that the code you have access to is the code running on their servers? Having access to some source doesn't help with that. Unless you strictly use end to end, only after having verified the keys, you are trusting the server quite a lot.
Of course. That's part of the grey areas I mentioned.
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#57I'm using Telegram as my main messaging system but I hope they'll open source everything. That's the only way to fully audit the service. Telegram is not too bad but has too many grey areas at this moment.
Client and protocol are open source. What more do you need?
Reproducible builds, and deploying my own server.
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#58Earlier quoted context omitted.
How do you ensure that the code you have access to is the code running on their servers? Having access to some source doesn't help with that. Unless you strictly use end to end, only after having verified the keys, you are trusting the server quite a lot.
Of course. That's part of the grey areas I mentioned.
My question is how a source audit addresses the server trust issue...
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#59Earlier quoted context omitted.
The lack of sync is a feature. That's what you get when you have a secure system.
How come https://riot.im (Matrix) manages to sync between devices AND have E2E, while also being federated? That's not what you get when you have a secure system, that's what you get when you design a system that can collect (and possibly monetize) the data of millions of users.
I believe that making sync work with E2E bring either security issues or more burden on the user; I would like them in telegram, but I also like the "if you send this message you exactly the device it go to, not an old laptop i forgot in the office, just my phone". it is meant to be secure on a device level.
Re: Voice Calls: Secure, Crystal-Clear, AI-Powered
#60Closed source, not end-to-end encrypted by default, end-to-end only device to device (so I can't swap seamlessly from a desktop to a mobile session). Not even the protocoll is open, so I am bound to their clients. Sadly it was the only nice alternative when the snowden stuff was published. That means those of my peers who made it away from skype/fb/whatsapp are now on telegram.
> end-to-end only device to device (so I can't swap seamlessly from a desktop to a mobile session) How do you accomplish a seamless swap from desktop to a mobile session using end-to-end encryption?
https://riot.im
Most seamless end-to-end encrypted solution I've come across. And it's still in beta. Every piece is open source (I'm running my own server), it's federated, supports history sync as a first-citizen feature, individual read receipts for group messages. The UX is not as polished as Telegram, but it's improving rapidly and is more than usable as a daily driver.