{"id":19675,"date":"2022-11-29T19:11:12","date_gmt":"2022-11-29T19:11:12","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/11\/29\/musk-does-have-some-good-ideas-encrypting-dms-would-be-huge-but\/"},"modified":"2022-11-29T19:11:12","modified_gmt":"2022-11-29T19:11:12","slug":"musk-does-have-some-good-ideas-encrypting-dms-would-be-huge-but","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/11\/29\/musk-does-have-some-good-ideas-encrypting-dms-would-be-huge-but\/","title":{"rendered":"Musk Does Have Some Good Ideas: Encrypting DMs Would Be Huge, But\u2026"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

from the it’s-not-as-easy-as-he-thinks<\/i> dept<\/h3>\n

We\u2019ve been somewhat critical of Elon Musk<\/a>\u2018s tenure as Twitter owner and CEO (I think for fairly good reasons), but he does have a few good ideas. Lead among them, wanting to enable encrypted direct messages<\/a> (DMs). He\u2019s mentioned it before, but also had this slide in a recent internal presentation he gave: <\/p>\n

\n
\"\"<\/figure>\n<\/div>\n

There\u2019s not much to go on with that slide, given that\u2026 it just says \u201cEncrypted DMs\u201d and appears to have an image of\u2026 existing, unencrypted DMs.<\/p>\n

However, Jane Manchun Wong, who is basically a wizard in sniffing out new features and new code being tested on Twitter (and elsewhere) notes that she\u2019s seen snippets of code referencing Signal Protocol<\/a> for encrypted DMs already showing up inside the Twitter iOS app.<\/p>\n

\n
\"\"<\/a><\/figure>\n<\/div>\n

Of course, it appears that\u2019s old code. Like so many things that Elon trots out, these were ideas that Twitter was already exploring, though it did appear that encrypted DMs was shelved. Jane had also spotted encrypted DM testing all the way back<\/a> in early 2018 as well.<\/p>\n

That said, it looks like the new code\u2026 is just the old code that Twitter had worked on being dusted off. Former Twitter engineer Brandon Carpenter notes that the code that Jane spotted was really his own code from that 2018 test<\/a>, quote tweeting Jane and noting \u201cOh look! Some code I wrote four years ago.\u201d<\/p>\n

\n
\"\"<\/a><\/figure>\n<\/div>\n

For what it\u2019s worth, Brandon also laid out one of the issues they had back in 2018, which was in the process of trying to obtain a license from Signal, Moxie Marlinspike, Signal\u2019s founder, ghosted them<\/a> for weeks when he just decided to go sailing without telling anyone. I\u2019ve seen some people question why anyone would need a license from Signal, considering that Signal Protocol<\/a> is an open protocol that anyone can use. But, it\u2019s not easy to do it right, and there are many, many reasons to get Signal\u2019s seal of approval before trusting the encryption.<\/p>\n

On a\u2026 let\u2019s say related note\u2026 Twitter\u2019s former Chief Information Security Officer, Lea Kissner wrote out a very interesting and useful thread<\/a> about the general pitfalls of trying to implement end-to-end encryption, especially in a web app. Suffice it to say it is not easy, and is not something you rush through or things are going to go very, very badly. There are big questions to consider, including how do you handle lost keys, how do you handle stolen keys, how do you handle abuse, and much, much more.<\/p>\n

This has all proven challenging for others as well, including Facebook\u2019s very slow efforts to roll out more end-to-end encryption among its various messaging products with a much larger team.<\/p>\n

Still, it\u2019s good that Elon considers this important, and one hopes that he can actually get it done, and at least implement less bad answers to some of the many questions that have stymied other teams looking to implement end-to-end encryption. Of course, it may also mean being willing to stand up against government demands and threats regarding encryption, something that we don\u2019t know if Elon is actually willing to do.<\/p>\n

On the whole, though, even as he\u2019s made many other mistakes, it\u2019s worth celebrating his stated support for more encrypted messaging.<\/p>\n

\nFiled Under: e2ee<\/a>, elon musk<\/a>, encryption<\/a>, end to end encryption<\/a>, signal protocol<\/a>
\n
Companies: signal<\/a>, twitter<\/a>\n<\/p>\n<\/div>\n