In the past, I’ve heard about how Google can keep records of all your Google phone’s past locations and text messages.

What about RCS messages which supposedly are encrypted from Android to Android? I know that it’s possible that they secretly keep a log behind the scenes, but as far as the regular consumer knows is there any record being kept with regard to the contents of these RCS messages?

  • EveryMuffinIsNowEncrypted@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    1
    ·
    5 days ago

    MMS is not a text message, it’s a media message (that’s what the M stands for).

    See, that’s interesting because I was always taught that “text message” is just an overarching term used to describe SMS and MMS. The notion that a text message is a synonym of SMS and only SMS is a new one to me!

    Yes, RCS chats are encrypted (supposedly)

    Good to know! Do you happen to know if the decryption keys are stored offline or on the carrier’s end? Because if the latter, then okay it’s more secure than SMS or MMS but only in the sense that some encryption is better than none. Lol.

    • artyom@piefed.social
      link
      fedilink
      English
      arrow-up
      2
      ·
      5 days ago

      I mean it’s in the name. A message containing media and not text is simply not a text message. Many people use them incorrectly but it’s literally in the name.

      RCS is (supposedly) E2EE so keys are stored locally.

      • EveryMuffinIsNowEncrypted@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 days ago

        I mean it’s in the name. A message containing media and not text is simply not a text message. Many people use them incorrectly but it’s literally in the name.

        Hey, I get it now. Lol. I was just explaining what my mindset was.

        RCS is (supposedly) E2EE so keys are stored locally.

        Well, you can have E2EE with keys stored server-side. It’s just kind of pointless from a security/privacy standpoint, but I’ve seen it happen.

        • artyom@piefed.social
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          4 days ago

          No you cannot. E2EE = end to end encrypted. If it can be decrypted from anywhere other than a sender or recipient (the ends) then it’s not E2EE.

          • EveryMuffinIsNowEncrypted@lemmy.blahaj.zone
            link
            fedilink
            English
            arrow-up
            1
            ·
            12 hours ago

            You are clearly misunderstanding me.

            If the keys are stored server-side, that means it’s stored by either the “sender or recipient”. The server is among those two options.

            • artyom@piefed.social
              link
              fedilink
              English
              arrow-up
              1
              ·
              9 hours ago

              I am not misunderstanding you. You just do not understand what E2EE means. Th server is not a sender or a recipient. It is not an “end”.