Hacker News Reader

It's not just opt-in, it's a non-default option you have to actively seek out and enable with every new conversation you start. So yes, by default, without additional steps taken, telegram is not e2e encrypted.

"Non-default option" is exactly what "opt-in" means, no?

You can opt in to something and then have it enabled by default. Not so with e2ee in Telegram.

Ah, I see.

I'd guess telegram can be secure if used correctly but the fact that their desktop client doesn't support secret chats at all feels weird. It has been one of the most requested features but they seem to have no interest in implementing it and have closed the issue on github.

The non-standard crypto was also problematic, at least initially. Furthermore, as outlined, the claims on reproducible builds vis-a-vis Signal are debatable - both provide them on Android, neither satisfactorily on iOS.

Defaults are important because (very) many people don't change them.

Most.