Live data from Hacker News

Telegram - secure, free messaging

telegram.org

11–20 of 231 posts

Re: Telegram - secure, free messaging

#11

Is HTTPS not secure channel for communication between client-server? What is the reason behind using an entirely different protocol for client-server communication[0] over HTTP? [0] - http://core.telegram.org/mtproto

I also don't get this. If we stopped trusting HTTPS, how are we supposed to make sure that we get an unmodified app from the play store, or the original source code from GitHub in the first place? Am I missing something?

Re: Telegram - secure, free messaging

#13
post #7

From their FAQ: > Q: How secure is Telegram? > Very secure. We are based on a new protocol, MTProto, built by our own specialists from scratch, with security in mind. At this moment, the biggest security threat to your Telegram messages is your mother reading over your shoulder. We took care of the rest. Oh good, a bunch of randoms have rolled their own crypto. I stopped reading at this point.

Gee, who are these random nobodies? http://telegram.org/faq#q-who-are-the-people-behind-telegram

Re: Telegram - secure, free messaging

#17
post #3

The important thing to remember is that all Telegram messages are always securely encrypted. The difference between messages in Secret Chats and ordinary Telegram messages is in the encryption type: client-client in case of Secret Chats, client-server/server-client for ordinary chats. Where "securely encrypted" means that the Telegram server has full access to message contents for ordinary chats. All chats should be…

Came here to say this. I also don't understand why "secret chats" can't be kept in the cloud. Why can't they store encrypted messages and give them to me to decrypt when I want to?

Re: Telegram - secure, free messaging

#19
post #3

The important thing to remember is that all Telegram messages are always securely encrypted. The difference between messages in Secret Chats and ordinary Telegram messages is in the encryption type: client-client in case of Secret Chats, client-server/server-client for ordinary chats. Where "securely encrypted" means that the Telegram server has full access to message contents for ordinary chats. All chats should be…

Begs the question why there's a difference really.
Post reply on HN