Discord added End to End Encryption! (but what does it even do)

A new Discord experiment has popped up, Secure Frames, and the name doesn't explain anything. But this is Discord's in-development end-to-end encryption for DM calls and server voice chats.

Okay so, a new Discord privacy feature. Sounds great! But in my potentially controversial opinion, I feel like this is going to be less of a feature and more of a marketing tool.

LINKS
-----------------------------------------------------------------------------
Discord Previews

SOCIALS
-----------------------------------------------------------------------------
Discord Server

Twitter

TIMESTAMPS
-----------------------------------------------------------------------------
00:00 - End-to-End Encryption
02:53 - What about DMs?
04:47 - Should I even care?
05:55 - Security Theatre
06:49 - feds are still feds

[Paranoia]

This is the first time hearing "Discord" and "Privacy" in one sentence in a positive way

[_Backpack_]

If you *need* end-to-end encryption, use Signal. Don't use discord for any things that you dont want on a piece of paper in front of a judge

[Co-owner]

Is this why I keep getting stuck in the "DTLS Connecting" phase when joining a voice channel?

[cephelos]

Got a friend that lives in one such country who's part of a major anti-government group, and does quite a bit of work with them. Sometimes when he wants to talk about it, we hop off discord to engage in more private communication, though frankly neither of us trust discord so much that we're gonna use their encryption without 100% proof that it truly is end-to-end secure.

[Seed]

Wait.. you guys don't call Taiwan a country in DMs?

[piratedom]

0:51 False. Discord is not open source, so we cannot verify if there are any backdoors in its encryption. Given that it is a corporation, like many others, it is very possible that such backdoors exist. Although if you look at it from another perspective, recording every single call on discord is not cost efficient in terms of storage and would require a lot of money.

[ottergauze]

a proprietary closed source app saying they they have end to end encryption means dunkey doo doo if you can't verify it, at the end of the day they can do anything as long as A. the app isn't open source and B. it goes through their servers anyway. Unless they add peer to peer calling in which case we just have Skype again.

[durdleduc]

i didn't realize how many people considered encryption to be a nothing feature? it's a pretty basic security measure for any internet usage nowadays. 99% of webpages that you visit end-to-end encrypt the info that you send them, that's what the little lock symbol means. imho encrypting voice, video, and text messages should be considered the bare minimum for any communication service.

the risk of cybersecurity when your shit isn't encrypted isn't that your FBI agent is gonna spy on you, it's that governments can use the data for large-scale projects that you cannot opt out of bar just never using the feature that isn't encrypted. "you have nothing to be spied on for" doesn't mean that not protecting against being spied on is okay lmao, that's the plot of shit like 1984. the existence of the hole at all is an issue.

[ligmaj]

Uses encrypted Discord call
-> Shares encryption key through unencrypted Discord message
-> Encryption is meaningless since the key is shared in an unencrypted form

This is the scenario that would probably happen with most people instead of the code being shared through a different app that is encrypted, so probably a majority of users that use the encryption won't benefit from it anyway. I wouldn't recommend Discord for any privacy-sensitive purpose. It's not designed to be private and there are plenty of products that are designed to be private.

[robinP_P]

e2e encryption is incredibly important. don't let random YouTubers that clearly don't understand privacy determine this for you, take this YouTubers advice to read into this yourself.

[Svvjhtgy]

Discord made stalker features and privacy, both the yin and yang (edit: bro not even my comment is safe from trolls 💀)

[DePhoegonIsle]

I mean... E2E encryption for voice is pretty shallow without chat encryption as well. They may as well just gloss over that 'those spying governments' might be doing something more with ya know messages which are 100x easier to store and parse.

[Httabych]

Whenever you hear words "it's for child safety" you can be absolutely sure that it's NOT for child safety and they just need an excuse to train AI/sell your data (best case scenario) / provide it to police and government without even court order (worst case scenario).
If child safety is your concern, go put an end to school bullying and overly aggressive parents first of all. But noone does that (as there's no benefit to law enforcement from doing it)

[sigataros]

wow, good on discord for doing the bare minimum to keep things private, meanwhile every other application has used this feature for years

[Ghost-YouTubeIsGarbage]

"Child protection" was never anything more than an excuse to collect user data

[dom.]

i don’t know why these videos interest me because i don’t even use discord, but i’m hooked on your channel keep up the good work!

[gerbagelthebagel]

You can have e2e encryption and allow reports at the same time. Those keys exist, those messages exist, and they're decrypted every time you fetch those messages from the server. You can literally send the raw messages to Discord via reports. They could make it so that a decryption key is sent with a report involving CSE, even, so they can access encrypted messages. It's far from impossible. Doing it this way wouldn't allow Discord to just peek in whenever, wouldn't allow anyone to just tap your API calls to see your messages, AND would still allow for reporting. It's not hard.

[Shiva-iqzv]

I always wait for the kiss at the end so I can close the video peacefully

[zellzoii]

The video editing is insane, especially those depth of field and blur effects

[MightyElemental]

I love the reason for voice call e2e is the same reason for text e2e encryption yet they don't have e2e for text.