search

Discord-Oxygen / Discord-Console-hacks

A collection of JavaScript Codes I've made to enhance the User Experience of Discord and some other Discord related stuff
GNU General Public License v3.0
519 stars 106 forks source link

Misleading information #45

Closed CanadaHonk closed 2 years ago

CanadaHonk commented 2 years ago

The README states:

Discord acts as a MITM (Intercepts your traffic and decrypts your messsages)

Discord doesn't intercept your traffic.. it just gets sent to their servers. It doesn't decrypt messages as they are never encrypted, Discord doesn't have / use End to End Encryption. (Unless you mean HTTPS? In which case that is every web server?)

Anonymous941 commented 2 years ago

I think it is referring to this article.

hxr404 commented 2 years ago

The README states:

Discord acts as a MITM (Intercepts your traffic and decrypts your messsages)

Discord doesn't intercept your traffic.. it just gets sent to their servers. It doesn't decrypt messages as they are never encrypted, Discord doesn't have / use End to End Encryption. (Unless you mean HTTPS? In which case that is every web server?)

Yes, you are absolutely right, most messages aren't encrypted in discord (except if you'd consider https which I don't), but the thing is, Discord claims that they encrypt messages. Voice & audio data are theoretically encrypted though, and as @Anonymous941 stated

I think it is referring to this article.

that paragraph on my README is referring to said article.

English isn't my first language, so if there's something that can be improved feel free to open a PR.

hxr404 commented 2 years ago

Well actually I think I might know where the misunderstanding is. It's about "intercepting traffic". That might suggest Discord is intercepting traffic it shouldn't have access to. What I was trying to say is, that they "intercept" messages (read & process them before passing them to the receiver, but it's not only about messages, but about voice & video calls and that's which is why I said traffic, I now recognize that it really wrong usage of the word.

So I apologize for using misleading language / for the wrong usage of that term. Thanks a lot for pointing it out, I probably wouldn't have noticed.

I'll fix it asap