The fact that we're having this discussion at all is because Telegram is not end to end encrypted by default (and groups chats are never E2E encrypted).
I tried to explain this fact to a lot of my friends but I always received of pushback, "it can't be true", "of course it's encrypted, it says on the web page it's secure!", etc. I cannot think of any other occasion where the reality of a situation is the exact opposite of what people think.
How did Telegram achieve perpetuating this lie? And more importantly, how do we stop it? What is a good resource to provide to people who think this is true? I usually send them an article written by Matthew Green[1], but it has always been dismissed as just "some dude's blog".
A lot of people are technical just enough to become dangerous. When I explained the problem to a lot of my friends they ran wireshark on the network connection and they saw gibberish. From this they have erroneously concluded they are safe...
I tried to explain this fact to a lot of my friends but I always received of pushback, "it can't be true", "of course it's encrypted, it says on the web page it's secure!", etc. I cannot think of any other occasion where the reality of a situation is the exact opposite of what people think.
How did Telegram achieve perpetuating this lie? And more importantly, how do we stop it? What is a good resource to provide to people who think this is true? I usually send them an article written by Matthew Green[1], but it has always been dismissed as just "some dude's blog".
A lot of people are technical just enough to become dangerous. When I explained the problem to a lot of my friends they ran wireshark on the network connection and they saw gibberish. From this they have erroneously concluded they are safe...
[1] https://blog.cryptographyengineering.com/2024/08/25/telegram...