So is telegram actually E2EE or isn’t it??🤨

I’ve seen loads of people claim that employees can access group chats and 1-on-1 chats along with having access to a lot of personal customer data.

However, when googled, it definitely says it’s encrypted and can’t be accessed and people today are acting as that is the case as well…😳

Where’s the disconnect?

#Telegram #E2EE #Encryption #Privacy

  • viq@social.hackerspace.pl
    link
    fedilink
    arrow-up
    2
    ·
    2 months ago

    @[email protected] 1-on-1 chats have an option of being encrypted, where it has to be explicitly selected. Also Telegram was previously criticised for creating their own cryptography for that, which makes it likely for there to be unintentional bugs or intentional insecure things. Also I’ve seen some mentions that even those chats may have keys reachable by server operators.
    Group chats and 1:1 chats without that option are encrypted only between client and the server, meaning no protection from server

  • Nikhil 🐧@social.linux.pizza
    link
    fedilink
    arrow-up
    1
    ·
    2 months ago

    @[email protected] chats are not e2ee by default. Groups are not e2ee at all.

    Also the encryption they use isn’t the industry standard but instead their own proprietary algorithm that was invented by the founder’s brother. You can decide for yourself how convincing that is.

  • Pyranota@social.linux.pizza
    link
    fedilink
    arrow-up
    1
    ·
    2 months ago

    @[email protected] Its not encrypted unless you create a “Private chat” which has terrible UX and most of the users prefer unencrypted chats. So yes, enybody who has access to server can read your messages. Furthermore government can and does read messages of certain individuals. So stay away from telegram.

    • BeAware :fediverse:@social.beaware.liveOP
      link
      fedilink
      arrow-up
      1
      ·
      2 months ago

      @[email protected] yeah, I have for awhile now, but just thought I should get clarification because people seem confused.

      Sure, the CEO shouldn’t be arrested for what other people use the platform for…but they’re also acting like people use it for privacy…which is very concerning…