A lot of privacy guides suggest avoiding Telegram. I understand that in its default mode there’s no E2EE (and no E2EE for groups at all). If people I know don’t wanttko use Signal, isn’t Telegram the lesser evil given it’s nicer privacy policy (than other popular ones)?

Say I use the FOSS version of it.

  • ghariksforge@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    1 year ago

    I find Telegram to be at least as trustworthy as Signal. Signal has a lot of red/orange flags that bother me. For example, Telegram is not based in the United States, whereas Signal is.

    • randomTingler@lemmy.world
      link
      fedilink
      English
      arrow-up
      16
      ·
      1 year ago

      An app designed by US company doesn’t represent anything related to security.

      The founder of telegram always complains that the FBI has access to signal, apple and other related chat apps.

      He suggests to use private chat, if it is confidential. The message transactions happens between peer to peer and it doesn’t go to the server. He was claiming all the privacy feature that you get from signal is the almost same as private chat. Signal stil uses the server.

        • Melpomene@kbin.social
          link
          fedilink
          arrow-up
          7
          ·
          1 year ago

          Given the fact that Signal is E2EE, “full access” would mean “full access to encrypted data without the keys to unencrypt it,” which is why E2EE is important in the first place. Were Signal compromised, US representatives would not resurrect the EARN IT Act year after year in an attempt to make E2EE illegal.

          No one had provided a shred of evidence that Signal has been compromised. And given that they’re more willing to pull out of a country entirely v. compromising user data, I’d call them a pretty safe bet.

    • hermit3@lemmy.one
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      The server’s trustworthiness does not matter for Signal. The app is designed to work securely regardless of the server. Moreover, even if the server software is open source, you cannot be sure that they run the same code that they publish.