Failing upwards: the Twitter encrypted DM failure
Twitter's encrypted direct messages have multiple security weaknesses, including reliance on Twitter's servers for key distribution and lack of forward secrecy. The feature was developed by only two engineers who are no longer at the company, and none of its limitations have been addressed since launch nearly two years ago.