Hacker News Reader

Comment by 1024core | Hacker News Reader

What if the person you're chatting with does not want it archived? (I'm not questioning, but wondering what a protocol would be)

View on HN

Suppose that you are chatting to me. You don't want your messages archived in any way.

I really want to keep records, so I have a second device, and take a picture of the screen every time I get a message of you.

There is no software or protocol that can entirely eliminate this human problem. The two parties have to have some level of agreement and trust.

This is also why Data Loss Prevention software is truly useless in an employee environment. Sure it can spot you forwarding email, but I can take a picture of the email with my phone.

You can't trust the client. It's the same fundamental flaw with DRM. If that person does not want it archived, you can make it difficult but not impossible.

I don't think it's nearly as difficult as DRM. That feature is mostly a gimmick. A lot like Snapchat's.

This might help with security if it takes as long to crack someone's phone as it takes to expire the messages.

Actually, I can get the source code for the client, delete the "auto expire" feature and compile it. So there's nothing stopping anyone from archiving messages you want them to be able to read.

This issue is one of those that make it very difficult to build a single "secure chat" app that does everything for everyone.

Personally, I want an automatic, encrypted network backup of all my messages so I don't lose them if my device is lost or destroyed. But I know lots of folks around here are excited about the automatic delete thing too. It's going to be very hard to make something that all of us can be happy with.

Reply on news.ycombinator.com