• Dee@lemmings.world
        link
        fedilink
        English
        arrow-up
        21
        ·
        2 years ago

        It’s optional, you can make it e2e encrypted with the secret chat option, which the CCP doesn’t like.

          • themarty27@lemmy.sdf.org
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 years ago
            1. Some people are going to care enough about the CCP not reading their chats to use Secret Chats… and those people are exactly the ones the CCP wants to spy on, so it’s a problem.

            2. Even without Secret Chats, messages are still encrypted, just not E2E encrypted. They are encrypted until they reach Telegram’s servers, where they are decrypted, backed up, reencrypted and forwarded to the recipient. This is done to enable chat synchronisation across devices, but all chats, Secret or not, are encrypted at all points outside of Telegram’s servers. The CCP doesn’t control the servers, ergo the CCP can’t see the chats (unless they find a way to snoop on the user end, but this is harder for them to do and easier for users to circumvent).

            • vrighter@discuss.tchncs.de
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              2
              ·
              edit-2
              2 years ago

              yes I know how tls works, thanks. my point is if they did care, they’d enable e2e by default. but they don’t, because they know that the average user will just not use it. They even don’t have a setting that says “I want all my chats to be encrypted”. you have to opt in, for each individual conversation. manually.

              if you want a secure messaging app, use one that encrypts by default, so it’s impossible to mess it up. Telegram is not it.

      • silvercove@lemdro.id
        link
        fedilink
        English
        arrow-up
        6
        ·
        2 years ago

        You don’t need e2e encryption of the servers are hosted in a jurisdiction your government can’t reach.