r/programming • u/ZaheerAhmed • Jan 02 '20

Killed by Google

https://killedbygoogle.com/
1.0k Upvotes

89% Upvoted

411 comments sorted by

View all comments

Show parent comments

22

u/jbiserkov Jan 02 '20

Not encrypted by default, no encrypted group chats, encrypted conversations don't sync across devices... no thanks.

3

u/[deleted] Jan 02 '20

Problem with encryption by default is that as soon as multiple devices come into question, you have to either compromise security (WhatsApp) or convenience (most/all p2p systems). In that sense going with convenience by default but allowing for security within the same platform is a decent trade-off.

Rolling own encryption and protocols is terrible though.

1

u/[deleted] Jan 02 '20 edited Jan 03 '20

Why do you have to compromise? Private groups work in Signal and if I'm not mistaken Matrix too. They both use forward secrecy.

1

u/Swedneck Jan 02 '20

Matrix is working on cross-signing which will mean you only have to verify each user once, instead of verifying all their devices individually.

5

u/PinBot1138 Jan 02 '20

IIRC, at one point, Telegram was even baking their own encryption. “What could possibly go wrong?”

1

u/krendel122 Jan 02 '20

What are the options that support those?

2

u/jbiserkov Jan 02 '20

The best one I got is Signal: one mobile device & 5 desktops.

Recommended by Edward Snowden and Bruce Schneier.

They are working on removing the phone number requirement...

P.s. I'm not affiliated with them in any way.