Hacker News new | past | comments | ask | show | jobs | submit login

Telegram should be avoided. They do weird things with their security and ignored criticism on it. The key verification requires checking an image, so you can't do it over the phone. Plus closed source, so you're very likely entirely depending on trusting Telegram.

Their response to using AES IGM? It's along the lines of "yeah this strange mode no one uses has issues but not in the way we use it so whatever. We've got math PhDs, so trust us."

I'm no expert, but I get a really bad feeling about them, since it's the totally wrong attitude to take.




>closed source

I can't comment on the other arguments, but the client of Telegram is certainly FOSS [1]. Their service being open source is irrelevant, since you couldn't verify it anyway.

[1] https://f-droid.org/wiki/page/org.telegram.messenger




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: