Published in Mobiles

Google's end-to-end encryption in Messaging App claims pooh

by on09 December 2024


Misleading Security Claims

Tech blogger John Gruber has slammed Google over its claims that its text-messaging app, Google Messages, ensures "conversations are end-to-end encrypted."

Gruber poetically said: "That is some serious bullshit. It's shamefully misleading regarding Google Messages's support for end-to-end encryption... Google Messages does support end-to-end encryption, but only over RCS and only if all participants in the chat are using a recent version of Google Messages. But the second screenshot in the Play Store listing flatly declares, 'Conversations are end-to-end encrypted,' full stop..."

Gruber suggests a more truthful representation: "I realise that 'Some conversations are end-to-end encrypted' will naturally spur curiosity regarding which conversations are encrypted and which aren't, but that's the truth. And users of the app should be aware of that. 'RCS conversations with other Google Messages users are encrypted' would work."

Further scrutiny is placed on the app’s report card which states: "Data is encrypted in transit" and "Your data is transferred over a secure connection." Gruber points out that this is "only true sometimes. It's downright fraudulent to describe Google Messages's transit security this way... Depending who you communicate with — iPhone users, Android users with old devices, Android users who use other text messaging apps — it's quite likely most of your messages won't be secure... E2EE is never available for SMS, and never available if a participant in the chat is using any RCS client (on Android or Apple Messages) other than Google Messages. That's an essential distinction that should be made clear, not obfuscated."

Gruber's earlier blog post highlighted that the RCS standard "has no encryption; E2EE RCS chats in Google Messages use Google's proprietary extension and are exclusive to the Google Messages app, so RCS chats between Google Messages and other apps, most conspicuously Apple Messages, are not encrypted."

In his newer post, Gruber adds, "While I'm at it, it's embarrassing that Google Voice has no support for RCS. It's Google's own app and service, and Google has been the world's most vocal proponent of RCS messaging."

Last modified on 09 December 2024
Rate this item
(6 votes)

Read more about: