On: Signal will withdraw from Sweden if encryption-busting laws take effect

[andelink]

Am I wrong to expect a letter I send someone via mail to not be opened and read by the post office first? I’ll be damned if I ever reach your level of indifference.

[whynotmaybe → andelink]

No, you can expect that it won't be read. But nobody can assure you that it never will.

This is the same with email or IM. I don't go around giving my Gmail password to everyone, but I know that many processes at Gmail read my mails.

I don't consider it indifference to know that every written conversation I make could be read by someone.

Nobody should blindly trust anyone telling you the opposite.

[fragmede → whynotmaybe]

Don't blindly trust it, but that's the whole point of end to end encryption!

[YetAnotherNick → fragmede]

That's the whole point of this thread that end to end encryption like Signal faces threat from government. End to end encryption means nothing if you downloaded binary from app store and some entity controls the binary. They could potentially turn off end to end for specific user without the user noticing that.

[whynotmaybe → fragmede]

What's the point of encryption? It's to protect data for some time, not forever.

All encryption can (and will) be broken.

I was there when Md5 became obsolete and was replaced with Sha-1 ( made by the nsa) which is now also obsolete.

I was there when all 8 letters password on windows could be cracked in minutes. And discovered that windows kept a copy of the hash locally, unless your password was +15chars.

Don't blindly trust end to end encryption.