我们需要为 OpenClaw 或 Hermes 等特工寻找 Telegram 的安全替代方案。
3 分•作者: oger•2 个月前
Telegram 的问题在于它不是端到端加密的,所以你发送的每条消息最终都会在他们的服务器上以 *未加密* 的形式存在。
想想看——你多久在 Telegram 聊天中发布过 Gmail 身份验证 URL 或其他 API 令牌?是的,你现在应该至少感到有点不安。
WhatsApp 可以用,但集成度不高。
至于 Signal,Meredith Whittaker 上周在一个会议上正确地指出,允许你的代理访问网络会打开访问所有私人聊天的权限。这可能也不是你想要的。
那么,未来的出路是什么?在我看来,对 Signal 进行分叉,用于任何代理行为,以将其与人类互动区分开来,是有意义的。或者至少进行隔离,这样代理就永远无法在未经批准的情况下访问“皇冠上的珠宝”。
还有其他想法吗?
查看原文
The problem with Telegram is, that it is not E2EE - so every message you send will end up *unencrypted* on their servers.<p>Think about it - how often did you post the Gmail authentication URL or another API token in the Telegram chat? Yes - you should feel at least a little uneasy now.<p>WhatsApp works but is not so tightly integrated.<p>And regarding Signal, Meredith Whittaker rightfully pointed out at a conference last week that giving web access to your agent opens up access to all private chats. Probably something you wouldn't want either.<p>So what's the way forward here? To me it feels like a fork of Signal that would be used for anything agentic in order to separate it from the human interactions would make sense. Or at least compartmentalization so that an agent never gets access to the Crown Jewels without approval.<p>Any other ideas?