They are two distinct concepts. Security with encryption is about trust guarantees. I send message X to Alice and I know Bob can't read the plaint text of message X because I encrypted it with Alice's key.
Privacy can benefit from additional security. But it's generally a whole other ball game. For example, Bob will still know I sent a message to Alice and can hit me with a wrench until I reveal the plaintext of message X.
if security proctols make it difficult to trace that you sent a message at all,I.e. also takes care of metadata along with the content you also get privacy.
Bob isn't very trustworthy.
Sure, we could encrypt everything ever created by any device at all times. But some sort of communication is sent from one IP address to another IP address. Even if it's encrypted, some form of something was sent.
This is where privacy then becomes a thing. You could start sending random noise out constantly. then when your encrypted data is sent out it looks like the rest of the random noise.
That would be like "I sent out 4999 random messages to 4999 random people and 1 encrypted message to Alice. Now Bob can't work out I sent my encrypted message to Alice".
That's the difference. Privacy is about hiding the existence of something from Bob. Security is about keeping something safe from Bob.
Sounds exactly like I2P darknet.
It's all privacy here. End to end encryption provides privacy; the company can't view your conversations. Not paying with a credit card provides privacy; you don't have to give them your personal information. So if you can't have one without the other then you can't have privacy with Zoom. (Unless you're a terrorist with a stolen credit card.)
What about the troves of metadata they collect and make available to law enforcement? Plus the fact you have to register with a phone number which can tie the metadata to a specific individual.
Doesn't sound very private to me.
Privacy is full of tradeoffs. Security isnt. My messages on WhatsApp are safe from anyone I don't trust that doesn't have 10 super computers and a lot of patience.
But that doesn't mean everything I do on there isn't tracked to kingdom come. It doesn't mean the fact I sent a message to Alice is private.
By your logic by my logic then Zoom provides privacy if you pay them. This is obviously the opposite of what I said. The most private solution is end to end encrypted and doesn't require a credit card and doesn't collect metadata etc.
> Privacy is full of tradeoffs. Security isnt.
Everything is full of trade offs. How can privacy be full of trade offs and security not when privacy is a subset of security?
The most private solution actually doesn't involve a computer at all. It's not very useful though.
> How can privacy be full of trade offs and security not when privacy is a subset of security?
See my initial comment: > Security with encryption is about trust guarantees.
I'm not meaning "cybersecurity" when I say security here. I'm talking specifically about the security of encryption. Privacy and crypto security are two distinct concepts within cybersecurity.
Privacy hides the existence of a thing. Encryption (security) keeps the thing safe.