I feel like I’ve repeatedly seen on HN that they’re not a good choice for secure messaging (though I don’t remember the specifics around it).
Signal and Matrix are the two options I’ve settled on.
[Edit]: Looks like the main issues with Telegram are that it doesn't use end to end encryption by default and that they rolled their own encryption protocol that's likely not secure. They also used to leak a ton of metadata, but from searching around it looks like they may have made improvements. Either way seems like something to avoid when there are obviously better alternatives.
https://github.com/signalapp/Signal-Android/issues/6898
https://github.com/signalapp/Signal-Android/issues/9194
Other apps like Threema or Telegram might delay messages sometimes, but at least they keep my device operational. If I'm punished for opting out of Google's spying, I at least want to choose the punishment.
Do you mean message history when setting up a new device? They are working on that, but it’s not so easy to do without storing all your chats with a server side encryption key. Apparently something coming soon though.
I’m looking forward to it as well as my only Telegram use case is using it as a notification service for my servers. All my chats are transitioned to Signal.
https://support.signal.org/hc/en-us/articles/360007062012-Ne...
They're also making moves to make the phone number requirement unnecessary. What privacy features does Telegram have? It sounds like they don't even have encryption on by default and people have also dismissed their security? Why would anyone use them?
Maybe this is an okay trade-off for you, but Signal's phone number as ID requirement means they can rely on the local contacts kept on your device and keep very little metadata about you on their servers.
Signal, Wickr, WhatsApp and others do not have this experience. They all have drawbacks and do not feel Telegram fast.
The desktop app takes several minutes to open (at least on Linux), so I find that the only way to use it is to start it at boot and always leave it open. I'm still hoping that someone may create other clients, e.g. a Pidgin backend.
The mobile apps, on the other hand, work really well. Been using them for years now, both on Android and iOS.
Only the expert's opinions are of any value IMO, and I've never seen anyone showing an attack on Telegram's encryption. Telegram themselves seem to claim that it's never broken. I often see vague criticism over the fact that they use their own protocol, but never anything more detailed than that.
https://core.telegram.org/techfaq#q-i-39m-a-security-expert-...
Muted chat, chat groups, draw on photos, stickers on photos, quiz / polls, dice rolls.
Signal does cover the basics well through (GIFs, voice messages, video, photo, replies) and it has a clean interface.
Signal is really annoying with all the things it wants me to do. Re-linking a mobile device. Re-entering a PIN/password for no reason other than to prove that I still know the password.
And when I'm finally logged in it shows me a completely useless selection of mostly obsolete contacts.
Signal has all of these
> quiz / polls, dice rolls.
Not these, as far as I know.
You can turn off the PIN reminders in Settings → Privacy.
Ah, that's good to know. Thanks!
I also see that the other issues I noticed previously (high latency when typing, “compose key” not working) have now been fixed as well.