And also: here’s how secure YOUR messaging app is.
Ever since the Snowden leaks revealed mass surveillance by governments around the world, the public has become more aware of just how secure—or not—their once-thought-private messages actually are. Indeed, encryption has become a hot topic not only in the press but at the pub over a pint. More and more people want to know that organizations can’t access their private communications without their knowing.
Encryption was once a technology many thought was relegated to spies and security services, but the tech has actually been around for a long while in the ordinary person’s everyday life. For example, when you make a bank transfer online, that data is encrypted so someone can’t hack your account. But recently people have become interested in how well their less monetary communications—such as their text messages and calls with friends—are protected. That’s why a bunch of apps have sprung up that offer high-level encryption and existing communication apps have begun implementing encryption.
But not all encryption is created equal so the Electronic Frontier Foundation has put together an awesome Secure Messaging Scorecard that shows you just how well individual apps encrypt your data. Some apps offer end-to-end encryption that is almost unbreakable, but others only encrypt a message in transit. How well do your common messaging apps hold up and which are the most secure apps? Here’s what the EFF, which rates each app as a pass or fail on 7 different metrics, says:
Commonly used messaging apps
iMessage: Apple’s messaging app gets a 5 out of 7. It earns points for being both encrypted in transit and encrypted so even Apple couldn’t read the messages if they were ordered to, but it loses points because you can’t verify contacts’ identities and the code isn’t open to independent review.
Facebook Chat: Facebook’s chat messaging system scores a lowly 2 out of 7. Messages are only encrypted in transit, but Facebook could access them if ordered too.
Google Hangouts/Chat: As with Facebook, so with Google: Hangouts scores a lowly 2 out of 7. Messages are only encrypted in transit, but Google could access them if ordered too.
Skype: The world’s most popular VOIP client scores of horrible 1 out of 7. Messages are encrypted in transfer, but Microsoft could access them on their side, past comms aren’t secure if the encryption keys are stolen, and the code isn’t open to independent review.
Snapchat: Snapchat scores a lowly 2 out of 7. Messages and pics are only encrypted in transit, so be sure any pic you send is something you wouldn’t mind the world seeing if Snapchat gets hacked.
Viber: As with Facebook and Google: Viber scores a lowly 2 out of 7. Messages are only encrypted in transit, but the company could access them if ordered too.
WhatsApp: recently WhatsApp has started encrypting everything you send. This earned the app a 6 out of 7 on the EFF’s scorecard. The only thing WhatsApp got dinged for is that the code is not open to independent review.
Apps built for messaging encryption
As you can see, the most commonly used messaging apps (above) aren’t completely secure—or, because many lack independent review, users can’t know 100% that the encryption on the apps actually works. But the EFF says there are other apps that score a 7 out of 7 on their scorecard. These apps are:
Signal: The free iOS and Android app allows you to take part in completely encrypted voice calls. Signal uses your existing number, doesn't require a password, and leverages privacy-preserving contact discovery to immediately display which of your contacts are reachable with Signal. Under the hood, it uses ZRTP, a well-tested protocol for secure voice communication, the company says.
Silent Phone: The company Silent Circle makes software and hardware for businesses who are worried about secure communications. Their Silent Phone software is available on Android and iOS and allows users to call and text with complete privacy.
Telegram: is another secure messaging app that received a 7 out of 7 from the EFF. The app allows you to text and chat with other Telegram users. Best of all, not only is it available on iOS and Android, they also make a Windows Phone app as well as clients for Mac and PCs.
Text Secure: Made by Open Whisper Systems, Text Secure enables encrypted voice calls and texts. It’s available for Android and iOS and among its many advocates is Edward Snowden who has recommended those interested in secure communications should “use anything by Open Whisper Systems.”
0 التعليقات:
إرسال تعليق