Disappearing messages don\u2019t impress security professionals, given how flimsy a privacy protection they offer, but despite an inherently fickle form the feature keeps recurring on comms platforms.
The latest to add what it calls an \u201c unsend \u201d feature is mobile messaging platform Telegram \u2014 which is now letting users retrieve (i.e. delete) messages within two days of sending them, once they update to v3.16 of its app.
Secure messaging app Signal also recently added an ephemeral messaging feature, back in October \u2014 albeit for \u2018tidiness\u2019, not privacy.
Telegram\u2019s unsend feature works within one-to-one and group messaging scenarios, and has to be enacted within the 48 hour window. It says the idea is to serve users with \u2018morning after messaging regret\u2019 by letting them scrub stuff they wish they\u2019d never said.
Of course it pays to point out this is at best privacy theatre, given that messages can be read and screengrabbed long before being \u2018retrieved\u2019. So basically don\u2019t trust your secrets or your stupidity to an \u2018unsend\u2019.
It also adds another layer of complexity to Telegram\u2019s messaging structure. The app already silos end-to-end encrypted messaging into a \u2018secret chats\u2019 feature, which has to be initiated by the user vs the default message type (which is not end-to-end encrypted). And Telegram has taken a lot of flak for not enabling e2e encryption across the board as other messaging apps have.
Its use of proprietary encryption also turns noses in the security community vs other messaging apps, such as Wire and WhatsApp , which use or build on the independently audited Signal Protocol (also used in the Signal messaging app).
Safe to say, there are a growing number of messaging options for mobile users to play around with. And a growing number of considerations to factor in if you\u2019re seeking a secure messaging app. But while unsending messages might be a fun way to troll your friends for kicks, it\u2019s no substitute for a proper wrapper of robust and respected end-to-end encryption.<\/p>\n