Les bots et les groupes Telegram n'ont jamais été chiffrés, idem pour toute conversation qui n'est pas en "échange secret" (qui est impossible à utiliser avec Telegram desktop).
Pas exactement, toutes les communications sont évidemment chiffrées et impossibles à intercepter(c'est d'ailleurs pour cela que Durov est poursuivi pour "Refus de communiquer, sur demandes des autorités habilitées, les informations ou documents nécessaires pour la réalisation et l'exploitation des interceptions autorisées par la loi"Telegram se targue d'ailleurs d'utiliser un protocole maison(MTProto) inviolable.
https://core.telegram.org/mtproto
Cependant il garde lui-même l'accès à toutes les données, sauf pour les "échanges secrets"(Secret Chats) qui sont chiffrés de bout en bout entre les 2 appareils. Ils affirment néanmoins avoir divulgué 0octet de données utilisateur à un gouvernement ou tout autre tiers, jusqu'à ce jour.
Quote
We support two layers of secure encryption. Server-client encryption is used in Cloud Chats (private and group chats), Secret Chats use an additional layer of client-client encryption. All data, regardless of type, is encrypted in the same way — be it text, media or files.
Our encryption is based on 256-bit symmetric AES encryption, 2048-bit RSA encryption, and Diffie–Hellman secure key exchange.
[...]
This means that all data (including media and files) that you send and receive via Telegram cannot be deciphered when intercepted by your internet service provider, owners of Wi-Fi routers you connect to, or other third parties.
[...]
Anyone who claims that Telegram messages can be deciphered is welcome to prove that claim in our competition and win $300,000. You can check out the Cracking Contest Description to learn more.
[...]
To protect the data that is not covered by end-to-end encryption, Telegram uses a distributed infrastructure. Cloud chat data is stored in multiple data centers around the globe that are controlled by different legal entities spread across different jurisdictions. The relevant decryption keys are split into parts and are never kept in the same place as the data they protect. As a result, several court orders from different jurisdictions are required to force us to give up any data.
Thanks to this structure, we can ensure that no single government or block of like-minded countries can intrude on people's privacy and freedom of expression. Telegram can be forced to give up data only if an issue is grave and universal enough to pass the scrutiny of several different legal systems around the world.
To this day, we have disclosed 0 bytes of user data to third parties, including governments.
https://telegram.org/faq Our encryption is based on 256-bit symmetric AES encryption, 2048-bit RSA encryption, and Diffie–Hellman secure key exchange.
[...]
This means that all data (including media and files) that you send and receive via Telegram cannot be deciphered when intercepted by your internet service provider, owners of Wi-Fi routers you connect to, or other third parties.
[...]
Anyone who claims that Telegram messages can be deciphered is welcome to prove that claim in our competition and win $300,000. You can check out the Cracking Contest Description to learn more.
[...]
To protect the data that is not covered by end-to-end encryption, Telegram uses a distributed infrastructure. Cloud chat data is stored in multiple data centers around the globe that are controlled by different legal entities spread across different jurisdictions. The relevant decryption keys are split into parts and are never kept in the same place as the data they protect. As a result, several court orders from different jurisdictions are required to force us to give up any data.
Thanks to this structure, we can ensure that no single government or block of like-minded countries can intrude on people's privacy and freedom of expression. Telegram can be forced to give up data only if an issue is grave and universal enough to pass the scrutiny of several different legal systems around the world.
To this day, we have disclosed 0 bytes of user data to third parties, including governments.
