A Secure Chat App’s Encryption Is So Bad It Is ‘Meaningless’

https://www.404media.co/a-secure-chat-apps-encryption-is-so-bad-it-is-meaningless/

35 points · 4 comments · view on lemmy.world

4 Comments

litchralee@sh.itjust.works · 6 pts · 145d

Holy false security, that's wild

massive_bereavement@fedia.io · 6 pts · 145d

This has to be on purpose.

pedz@lemmy.ca · 2 pts · 145d (1 reply)

I have no idea how good plain SSL is but I just use my own IRC server with SSL on top. At least I can control the whole thing.

lemonskate@lemmy.world · 7 pts · 145d

As long as you're using up to date TLS protocols and algorithms, it's great for encryption in transit but isn't going to do anything (out of the box at least) for encryption of data at rest, but if you just disable chat logging on the server that's not really an issue. Clients can still store insecure copies of chats, but that's an issue with every secure messenger.

LostWanderer@fedia.io · 1 pts · 145d
[ removed ]