nanog mailing list archives

Re: WhatsApp's New Policy Has...


From: Saku Ytti <saku () ytti fi>
Date: Fri, 8 Jan 2021 21:31:53 +0200

On Fri, 8 Jan 2021 at 21:18, Richard Porter <richard () pedantictheory com> wrote:

Has anyone considered or used Keybase?

Didn't they sell their customers recently. I may be talking out of my posterior.

But on a more serious note, which of these are provably correct?

One of them used to offer you a local message and outgoing data
(signal?) so you could independently verify that they send the correct
data out, reflecting the algorithmic choice you have. So instead of
trusting that(signal?) you have to trust the algorithm, which they
don't control.





On Fri, Jan 8, 2021 at 1:14 PM Mark Tinka <mark.tinka () seacom com> wrote:



On 1/8/21 19:26, Drew Weaver wrote:

This might be anecdotal but there is a ton of debate about whether or not Telegram is encrypted.

This is not anecdotal though, on Wednesday night I saw an interview with a security expert on CNBC and he 
indicated that they knew that the riots in DC were going to happen because they had been "monitoring the 
extremists Telegram groups". What they didn't say was whether or not they were simply members of those groups, or 
monitoring from a "networking/technology" sense. I'm not sure if Signal does groups the same way that Telegram 
does but that one is widely believed to be much better than Telegram as far as privacy and security.

Telegram is a tremendously useful (and free service) for connecting to Elastalert for all manner of notifications, 
but we have since moved to Teams for that just because we can't really be sure what is going on under the hood 
with Telegram.

Just some things that I have observed, not trying to start a holy war.

My rudimentary understanding of Telegram is that group messages are
client-server, which is why new members can read old posts when they
join a group.

Signal, on the other hand, is p2p for members within the group. No
messages are ever sent to their cloud.

Mark.



-- 
  ++ytti


Current thread: