How ironic, the founder of Telegram - Telegram! - calling into question Signal's crypto.
Telegram's crypto is a complete question mark. I wouldn't be surprised if it's backdoored by Russian intelligence.
Telegram's crypto is a complete question mark. I wouldn't be surprised if it's backdoored by Russian intelligence.
And it was used few times already. Some of such occurrences were well documented.
In 2015, in a lobby discussion on DEFCON two people confronted Marlinspike about the retransmission vulnerability in the Signal. He was asked to give a _yes or no answer_ to whether the central server can trigger the key renegotiation by sending the "I lost my phone" command to both parties. And he answered this question _no_. This was long before the Guardian lashed at FB with the backdoor article.
I personally verified this account with 2 people.
Marlinspike Moxie is a liar.
Still, _it is possible to trigger this process for a third party_, and then to MITM the key exchange.
I'm not exactly comfortable with this now - it seems like someone may be able to spam messages to hide the key change.
Why Telegram crypto is a complete question mark but Signal crypto is unquestionable?
Maybe otherwise, Signal backdoored to US intelligence?
I'm using Telegram client compiled from sources right now...
Edit: The main problem with Telegram is not the crypto, but the fact that end-to-end crypto is not used by default. Except with calls, those are always end to end encrypted.