Differences

This shows you the differences between two versions of the page.

--- messaging_candidates:start [2017/06/24 16:17] – [Telegram Messenger] mithat
+++ messaging_candidates:start [2017/06/30 18:14] (current) – [Telegram Messenger] mithat
@@ Line 5: / Line 5: @@
 ===== Requirements =====
-The starting point in candidate selection is the [[https://www.eff.org/secure-messaging-scorecard|EFF's Secure Messaging Scorecard]] (as of 14 July 2015). From that list, only entries that have at most one red mark are considered.
+The starting point in candidate selection is the now obsolete [[https://www.eff.org/secure-messaging-scorecard|EFF's Secure Messaging Scorecard]] (as of 14 July 2015). From that list, only entries that have at most one red mark are considered.
 In addition, the ideal candidate will:
@@ Line 67: / Line 67: @@
 > All code will be released eventually. We started with the most useful parts -- a well-documented API that allows developers to build new Telegram apps, and open source clients that can be verified by security specialists.
-  * //Offer privacy and security protections by default.// For the highest security (i.e., full marks from EFF), secret chats can be used. See the [[https://telegram.org/faq#q-how-secure-is-telegram|FAQ]]. also, the [[https://telegram.org/privacy|privacy policy]] is encouraging.
+  * //Offer privacy and security protections by default.// For the highest security (i.e., full marks from EFF), secret chats can be used. See the [[https://telegram.org/faq#q-how-secure-is-telegram|FAQ]]. also, the [[https://telegram.org/privacy|privacy policy]] is encouraging. Questions have also been raised regarding the solidity of its encryption((See[[http://gizmodo.com/why-you-should-stop-using-telegram-right-now-1782557415|Why You Should Stop Using Telegram Right Now]], [[http://fortune.com/2016/08/02/telegram-hackers-iran/|Iranian Hackers Just Cracked This Super Secure Instant Messaging Service]], and [[https://www.theverge.com/2017/1/11/14237136/trump-leak-telegram-security-cracked-russia-encryption|Trump leak raises new questions about Telegram security]].))
   * //Not require a phone number to create an account.// The only way to open a Telegram account is by using an SMS-enabled phone number.
   * //Not require your phone number to be divulged to everyone with whom you communicate.// The path of least resistance for using Telegram is to use your phone number as your identifier; however username identification is possible. See [[Telegram|Telegram use notes]] for more info.
@@ Line 76: / Line 76: @@
 Open Whisper Systems' partnership with WhatsApp/Facebook renders any security and privacy provisions suspect. Whatever lives within WhatsApp/Facebook is effectively governed by WhatsApp/Facebook privacy and security. In the absence of additional information, this renders this option ineligible for further consideration.
-===== Recommendation =====
+==== Tox ====
+Relative newcomer [[https://tox.chat/index.html|Tox]] doesn't appear on the EFF's list. A more complete evaluation is pending, but initially this looks like a winner.
-The only platform that comes close to a recommendation is Telegram. But its use of your phone number as the primary source for identification and its clunky use of usernames makes an enthusiastic recommendation difficult.
+===== Recommendation =====
+Tox needs a more complete evaluation, but on the surface it is encouraging. Telegram comes close to a recommendation, but the questions surrounding its encryption, its use of your phone number as the primary source for identification, and its clunky use of usernames makes an enthusiastic recommendation difficult.