A BIT MORE ON TWITTER/X'S NEW ENCRYPTED MESSAGING

Summary from the TLDR InfoSec newsletter

X's XChat messaging protocol uses flawed end-to-end encryption. It lacks forward secrecy, and stores user private keys on X's servers using Juicebox protocol across three software-based servers (not HSMs). This allows X to potentially decrypt messages for internal purposes or legal compulsion, making XChat's encryption largely ineffective against surveillance.