Secure Messaging Takes Some Steps Forward, Some Steps Back: 2016 In Review

[Kevin Lancaster]

Secure Messaging Takes Some Steps Forward, Some Steps Back: 2016 In Review

This year has been full of developments in messaging platforms that employ encryption to protect users. 2016 saw an increase in the level of security for some major messaging services, bringing end-to-end encryption to over a billion people. Unfortunately, we’ve also seen major platforms making poor decisions for users and potentially undermining the strong cryptography built into their apps.

 

[sajunky]

Whatsapp encryption is a joke. A tenager is able to clone the account and read all current and past messages as well. Nobody is using Signal.

http://www.telegram.org

 

[hawker]

Telegram isn't even encrypted by default. :|

 

[Bryn]

Telegram isn't even encrypted by default. :|

That's fine by me. Chats of no consequence I don't bother encrypting, as you can use the super awesome desktop app that doesn't require tethering to your phone (and because I couldn't care less if someone else reads them). And if you do feel the need for encryption, it's available. You can even set messages to self destruct if you want and define the timer.

 

[backstreetboy]

Google released Allo Messenger with “incognito” mode. These end-to-end encrypted options co-exist on the apps with a default option that is only encrypted in transit.
Unfortunately, this “mixed mode” design may do more harm than good by teaching users the wrong lessons about encryption. Branding end-to-end encryption as “secret,” “incognito,” or “private” may encourage users to use end-to-end encryption only when they are doing something shady or embarrassing. And if end-to-end encryption is a feature that you only use when you want to hide or protect something, then the simple act of using it functions as a red flag for valuable, sensitive information. Instead, encryption should be an automatic, straightforward, easy-to-use status quo to protect all communications.

I disagree. Just like the Chrome browser and all the others, it should save everything unless you go incognito. That's how people are trained. Why go change it again for messaging? Makes no sense. Also you'll be missing out on AI and Google Assistant etc. Messaging is ripe for a AI shake up.

 

[hawker]

Google Allo is garbage to use though. The assistant wasn't all that useful in my experience.

 

[backstreetboy]

Google Allo is garbage to use though. The assistant wasn't all that useful in my experience.

Works great here. Like Google now only even better.

 

[hawker]

Works great here. Like Google now only even better.

The fact that the Assistant, Google Now, Google Keep reminders and Google Inbox don' integrate into each other is incredibly frustrating.

 

[Bryn]

Works great here. Like Google now only even better.

Allo must be one of the last messengers I'd ever use. Has almost nothing in the way of options and customisation, shows avatars in one on one chat which is an annoying waste of space and even Snowden told people to stay away from it.

 

[backstreetboy]

The fact that the Assistant, Google Now, Google Keep reminders and Google Inbox don' integrate into each other is incredibly frustrating.

Mine integrates (all of them). Maybe try turning off your Google Now.

 

[SauRoNZA]

Allo must be one of the last messengers I'd ever use. Has almost nothing in the way of options and customisation, shows avatars in one on one chat which is an annoying waste of space and even Snowden told people to stay away from it.

Why it even exists is beyond me.

I've simply carried on using Hangouts as per normal...why Allo doesn't just a different front end for that (like Inbox is for Gmail) I don't know.

Any application that isn't multi-platform by some way I simply wan't use. I like typing on a full keyboard when I have it in front of me.

Same reason I now use iMessage less and less since I no longer have a Mac to type on.

 

[sajunky]

I disagree. Just like the Chrome browser and all the others, it should save everything unless you go incognito. That's how people are trained. Why go change it again for messaging? Makes no sense. Also you'll be missing out on AI and Google Assistant etc. Messaging is ripe for a AI shake up.

I aslo disagree but on a different ground. There is a trade off for using 'perfect' encryption - flexibility. Whatsapp has end to end encryption, but to satisfy popular demand they allowed to receive whatsapp messages on multiple devices. It allowed to clone Whatsapp accounts quite easy, rendering the entire Whatsapp encryption feature is worthless.

In my opinion people must be aware that jokes can be exchanged normal way (preferably encrypted in transit), but meeting dates, order details etc should be sent by more secure channel.

 

[sajunky]

Telegram isn't even encrypted by default. :|

Not true. All Telegram messages are encrypted.

Standard chats are stored on servers in transit (probably longer, not sure), but Telegram is a distrubuted network and owners of Telegram servers do not have access to the encryption keys.

Secret chats are delivered end to end. Servers just initiate direct communication, no secret chats messages are passing through the Telegram servers. For security reason secret chat messages can not be viewed on multiple devices.