The podcast discusses the introduction of X's encrypted messaging feature, provides a guide on how to use it, explores its limitations and potential security risks, compares encryption protocols in private messaging apps, and advises against using X's encrypted messenger for sensitive conversations.
15:32
AI Summary
AI Chapters
Episode notes
auto_awesome
Podcast summary created with Snipd AI
Quick takeaways
X's introduction of encrypted messaging is a positive step towards privacy and signals the significance of privacy in the tech industry, although it is recommended to use more robust privacy-focused messaging apps for sensitive content.
X's encrypted messaging implementation lacks crucial features like Perfect Forward Secrecy, audits, and notification of message interception, making it less secure compared to apps like PsiKnal and Signal.
Deep dives
The Importance of Encrypted Direct Messages on X (formerly Twitter)
X, one of the most widely used messaging services, has introduced encrypted direct messages as a step towards becoming the most trusted platform on the internet. This offers users the option of more private communication, protecting their conversations from internal access. While end-to-end encryption is a welcome move, there are concerns about X's implementation. X lacks certain crucial features like Perfect Forward Secrecy and is not open source. Additionally, their encrypted messaging system is yet to undergo audits. For high-stakes communications, it is advised to use more reliable and audited encrypted messaging apps like PsiKnal.
How X's Encrypted Messages Work and Their Limitations
X's encrypted message system utilizes both AES and asymmetric encryption. AES is used to protect the underlying message, generating a conversation key that is protected by asymmetric encryption. However, some critical steps are missing in X's implementation. X can currently intercept and read messages without notifying the users, leaving conversations vulnerable. Moreover, X's system lacks Perfect Forward Secrecy, which prevents access to the entire message history if someone gains access to the conversation key. Compared to the Signal Protocol, X's encrypted messaging falls short in terms of security.
Considerations When Using X's Encrypted Messages
While X's encrypted messages add a layer of protection against internal access to conversations, caution is still advised. X's implementation has significant limitations, such as the potential for intercepting conversations and accessing message history. The absence of safety numbers and signature checks further decreases the safety of their encrypted messages. Users are encouraged to use more comprehensive encrypted messaging apps like Signal for sensitive conversations. Nevertheless, choosing X's encrypted messages over their standard direct messages does offer a level of privacy and sends a message to the tech industry about the importance of privacy.
X, the platform formerly known as Twitter, rolled out "encrypted messages" this year! We explain how to use it, who is eligible, but we also dive into the nitty gritty of how this encryption has been implements, and why we don't think you should trust it for anything sensitive. There are better E2EE messaging apps out there.
00:00 X introduces Encrypted Messaging 02:53 How to Send Encrypted Messages on X 03:30 Who Can Use X’s Encrypted Messages? 03:57 Should You Use X’s Encrypted Messaging? 06:13 Deep Dive: How They've Implemented It 09:54 Problems 12:34 Conclusion
X’s introduction of encrypted messaging is long overdue, and a very welcome feature: It not only brings privacy to a lot more people, but it's also a signal to the entire tech industry that privacy is important. Just be careful not to place too much trust in their encrypted messenger: For anything sensitive, we recommend using a platform with more robust privacy features.