Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The only Thing I don't like about discord is that it's not e2ee, so I guess with regards to talking in huge groups or video chatting it has a performance advantage in that sense.


Is end-to-end encryption in Discord even feasable? Discord is massively multipler text, audio, and video chat - end to end encrypting that is very hard, no?


Text obviously, because if you want a history you need to store that on the server.


You can store an encrypted history on the server.

But searching is hard to do with encrypted text.


You could, but then a new user can't read the history. But there might be ways around that, ie. automatic resending of the history by a participant.

You can search on the client with the decrypted text.


It could be. The simple approach is generating a key when the server/channel starts and sharing that between clients. Of course there are downsides to this, but you can make improvements to this system to get aspects that you want (such as rotating the key when someone leaves and giving all keys to new members).


There is only three hard parts of e2ee.

1. Making it actually secure. 2. How does a user logging in to multiple locations share the key. 3. Full text search.

It would be hard for discord to do 1 and make everything e2ee. But the casual nature of discord users makes 2 and 3 a deal breaker.


"only".




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: