undefined | Better HN

0 pointsNayamAmarshe3y ago0 comments

The thread you linked is talking about a totally different algorithm, not relevant to our discussion.

MTProto 1.0 had flaws and proven vulnerabilities. Telegram ditched the algorithm after 2013.

MTProto 2.0 is much secure and has been audited multiple times already without fail. The security is solid, that's the consensus.

Also, there are 2 types of MTProto 2.0 algorithms. One is cloud encryption and the other is end to end encryption.

Cloud encryption is enabled by default on all chats but for those who need end to end encryption, they can use secret chats.

You can read more about it here: https://core.telegram.org/techfaq#q-how-does-server-client-e...

0 comments

hiimkeks3y ago

Apparently they didn't learn much, given that MTProto 2.0 still uses IGE. Or still derives the IV from a hash of the message.

The article you link does not mention "cloud encryption". What is that? TLS?

NayamAmarsheOP3y ago

The cloud encryption is what I linked, the Server-Client encryption. Just below it, you can see E2E.

IYasha3y ago

E2E is not available on all platforms, is hidden in obscure menus and the whole UI discourages users from using it. Telegram is a data-harvesting social goolag-oriented network after all. :-/

NayamAmarsheOP3y ago

That would be a pessimistic way to see it.

The greatest feature that telegram offers is cloud sync. Everybody knows the limitations E2EE comes with. There's no way you could have thousands of members in a group on Signal.

Along with that, the ability to manage device sessions and to login on multiple devices with full chat sync is extremely unique to Telegram.

You're asking them to ditch that in favor of inferior UX, which they simply cannot do at this point.

But I do hear the valid complaints. I do believe they should improve MTProto 2.0 to work on multiple devices and in groups. Their implementation is fine for 1-1 chats but having something better than that is always welcome.

j / k navigate · click thread line to collapse

0 comments

hiimkeks3y ago

Apparently they didn't learn much, given that MTProto 2.0 still uses IGE. Or still derives the IV from a hash of the message.

The article you link does not mention "cloud encryption". What is that? TLS?

NayamAmarsheOP3y ago

The cloud encryption is what I linked, the Server-Client encryption. Just below it, you can see E2E.

IYasha3y ago

E2E is not available on all platforms, is hidden in obscure menus and the whole UI discourages users from using it. Telegram is a data-harvesting social goolag-oriented network after all. :-/

NayamAmarsheOP3y ago

That would be a pessimistic way to see it.

The greatest feature that telegram offers is cloud sync. Everybody knows the limitations E2EE comes with. There's no way you could have thousands of members in a group on Signal.

Along with that, the ability to manage device sessions and to login on multiple devices with full chat sync is extremely unique to Telegram.

You're asking them to ditch that in favor of inferior UX, which they simply cannot do at this point.

j / k navigate · click thread line to collapse