Comment

Comment by johnmorrison

E2E encryption is kind of a fucky thing, some suggest it is fundamentally impossible for central web services and even mobile / desktop apps. Basically, if there is a third party involved in the code besides Alice and Bob, the two can never guarantee E2E encryption.

Web part is simple, as there are countless ways you can get malicious code delivered from what you think is the correct, safe, web server.

Same concept applies to app store / desktop program updates, but with a slightly slower and more difficult attack prospect.

Anyways, Telegram does seem to have the best encryption of any major service, and it's what we use at my company for almost all internal communications.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton