Hacker News Reader

Parent Full thread

zeitg3ist

> Telegram even stores plaintext copies of everyone's entire message history on the server for multi-device sync.

Really? In their FAQ [1] they state:

> ordinary chats use client-server/server-client encryption and are stored securely encrypted on our servers

What's your source?

[1] https://telegram.org/faq

View on HN

This is a great example of deceptive marketing at work. You can check out their API here:

https://core.telegram.org/methods#working-with-messages

...where's the encryption on message histories? There is none. If the data is encrypted server-side, it's with keys that live on the servers. In other words, the encryption provides no value and the servers are "trusted." The point of end to end encryption is not to have to trust servers.

As stated in the FAQ normal chats are NOT end to end encrypted. Of course the server has to store the messages in plain text to make cloud sync work (without requiring a password).

Reply on news.ycombinator.com