cross-posted from: https://kbin.projectsegfau.lt/m/tech@kbin.social/t/26889

Google just announced that all RCS conversations in Messages are now fully end-to-end encrypted, even in group chats. RCS stands for Rich Communication Services and is replacing traditional text and picture messaging, providing you with more dynamic and secure features. With RCS enabled, you can share high-res photos and videos, see typing indicators for your…

  • Kbin_space_program@kbin.social
    link
    fedilink
    arrow-up
    143
    arrow-down
    23
    ·
    1 year ago

    Fun fact, a group I knew in uni made an end to end encryption program that sent messages through Google more than a decade ago and Google got really, really mad at them threatening to shut down all Google accounts associated with all IP addresses they used.

    Guarantee it’s not fully E2E.

    • echo64@lemmy.world
      link
      fedilink
      English
      arrow-up
      128
      arrow-down
      3
      ·
      1 year ago

      It’s E2E, E2E isn’t really something you can be sneaky about unless you roll your own encryption and then make claims about it totally being safe bro

      They, however, run the app you are using to type everything, the keyboard you are using to type everything and the os you are using to type everything. If they want something, they don’t need to look at your in flight messages.

      • Rooki@lemmy.world
        link
        fedilink
        English
        arrow-up
        20
        arrow-down
        3
        ·
        1 year ago

        They can… everything is closed there. It can just be “encrypted” for your eyes

      • GigglyBobble@kbin.social
        link
        fedilink
        arrow-up
        10
        arrow-down
        2
        ·
        1 year ago

        It’s E2E, E2E isn’t really something you can be sneaky about unless you roll your own encryption and then make claims about it totally being safe bro

        With a closed source app? Of course you can. How is anyone supposed to know what keys you use for encryption? Doesn’t even need to be a remote one - just the key generation be reproducible by the developer.

        • Not_Alec_Baldwin@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          1 year ago

          I don’t know if you’re understanding that that’s his point.

          If Google can reproduce the key it’s not fully “end to end” unless one of the "end"s is Google.

      • The Hobbyist@lemmy.zip
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 year ago

        The trust doesn’t even have to be in the encryption, they could very well use the same signal protocol. They would only need a copy of the keys you are using and you wouldn’t even know… That’s the problem with closed source programs, there is no certainty that its not happening (and I’m not saying it is, I can’t prove it, obviously, but the doubt remains, we need to trust these companies not to screw us over and they don’t really have the best track record in that…)

      • arthurpizza@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        1 year ago

        I know they have unencrypted versions from my phone because my tablet and desktop version of messages seamlessly connects to the chat. So it’s probably be E2E in transit alone.

    • pjhenry1216@kbin.social
      link
      fedilink
      arrow-up
      25
      arrow-down
      1
      ·
      1 year ago

      Sent messages “through Google”? Like Chat? Email? That’s such an ambiguous statement.

      E2EE has been a available approaching three years now. I’d imagine if they were lying and defrauding the population, someone would have found out by now. This announcement is just that it’s on by default for everyone.

    • lemmyvore@feddit.nl
      link
      fedilink
      English
      arrow-up
      20
      arrow-down
      1
      ·
      1 year ago

      It doesn’t matter if it’s E2E or not when Google can spy on you directly on the phones at either end.