this post was submitted on 25 Aug 2024
1 points (100.0% liked)
Technology
59566 readers
4890 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
One of the most important rules of cybersecurity is: never roll your own encryption.
And what did the guys at Telegram do? Rolled their own encryption.
If you are into Telegram because you think it's secure, think again. There are much better alternatives out there, adopting proved industry standards. Signal or Matrix just to name a few.
What does 'rolling encryption' mean (if it's possible to ELI15).
'Rolling your own...' is a comparison to rolling your own cigarettes. That is, creating your own version from scratch instead of using something ready-made.
OP probably meant "to roll out", meaning: "to deploy".
Nah, it's I guess jargon at this point, but it really just means to make up your own crypto algos.
Generally a good rule, however Signal did develop their own encryption. It was so good it became the industry standard.
No, it's not the rule itself. It's rather an advice not to do as rolling own crypto is very tricky and complicated thing. You have to be very aware of many possible attacks, how they do work, to create own crypto properly
More like "don't roll your own crypto unless you're ready to spend years getting it scrutinized and polished".
if the people you want to talk to are using telegram then you don't have much of a choice
Maybe tell them you are using signal and that they don't have a choice but to use it
that doesn't work with clients. or vendors. or any other type of business partner, really. maybe your staff and your grandma and steven?