“FYI, this is a totally misleading and false claim.” (comment)
recommended by 1 user | 2024 | NayamAmarshe on: Arrest of Pavel Durov, Telegram CEO, charges of terrorism,… | cryptography | original thread |
NayamAmarshe on Aug 25, 2024 | on: Arrest of Pavel Durov, Telegram CEO, charges of terrorism, fraud, child porn | view on HN

> They are stored in plaintext on telegram servers

FYI, this is a totally misleading and false claim.

Telegram uses the MTProto 2.0 Cloud algorithm for non-secret chats[1][2].

In fact, it uses a split-key encryption system and the servers are all stored in multiple jurisdictions. So even Telegram employees can't decrypt the chats, because you'd need to compromise all the servers at the same time.

Telegram's algorithm has been independently audited multiple times. Compared to other apps like WhatsApp with claims of E2EE and no body of verification and validation.[3]

[1]: https://core.telegram.org/mtproto#general-description [2]: https://core.telegram.org/mtproto/AJiEAwIYFoAsBGJBjZwYoQIwFM... [3]: https://arxiv.org/pdf/2012.03141

One user recommended this comment. What they said:
sunaookami Aug 26, 2024 | on: The Arrest of Pavel Durov Is a Reminder That Telegram Is… | context

It also doesn't mean "plain text". Telegram uses MTProto and the decryption keys are stored on multiple servers in multiple jurisdictions, something which Gizmodo doesn't even mention.

See also this excellent comment by another HN user: https://news.ycombinator.com/item?id=41348228