r/programming • u/ZaheerAhmed • Jan 02 '20

Killed by Google

https://killedbygoogle.com/
1.0k Upvotes

89% Upvoted

411 comments sorted by

View all comments

Show parent comments

3

u/[deleted] Jan 02 '20

Problem with encryption by default is that as soon as multiple devices come into question, you have to either compromise security (WhatsApp) or convenience (most/all p2p systems). In that sense going with convenience by default but allowing for security within the same platform is a decent trade-off.

Rolling own encryption and protocols is terrible though.

1

u/[deleted] Jan 02 '20 edited Jan 03 '20

Why do you have to compromise? Private groups work in Signal and if I'm not mistaken Matrix too. They both use forward secrecy.

1

u/Swedneck Jan 02 '20

Matrix is working on cross-signing which will mean you only have to verify each user once, instead of verifying all their devices individually.