Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Many people seem to think that Telegram tries to be a Signal or Matrix replacement. I dont think Telegram tries to be any of that. If anything you can compare it to Discord, except much better.

To enable synched e2e conversations accross many devices you also need to synch private keys, which is a security nightmare.



Either sync private keys or the messages itself.

Why would it be a security nightmare? In contrast to not even supporting e2ee in the first place?


How would you securely sync priv keys? How would you securely sync plaintext messages?

Telegram supports e2ee but it is device centric for this reason


> How would you securely sync plaintext messages?

Same as with private keys: Verified e2ee

> Telegram supports e2ee but it is device centric for this reason

At least this is what they told you


> Same as with private keys: Verified e2ee

Yikes


Anything meaningful to say?


About as meaningful as the suggestion to use "verified e2ee" to transmit private keys


Shoot




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: