To get the most secure, private messenger, do you have to make it yourself [paranoid]?

Question

Information Security

Such messengers like telegram, signal still require a phone number. But this is a huge vulnerability!
So, in order to be completely sure of security, you need to create your own chat, and not give it to the public, but only to those who need it? Raise your secure server, encrypted protocol, right?

Answer 1

So you made your chat, gave a friend a link, and you completely trust him, he is an honest and devoted person to you. And he has a Trojan on his computer that takes screenshots of the screen. And the screen itself is turned to the window without curtains. The camera is watching from the smartphone, and the microphone happens. And what to answer the cops when they just come and ask, what and how?
In general, you should not worry if you are not a terrorist, of course. Because in most cases nobody needs you. Use regular messengers. Your secrets may be in theory (!) and will get into secret organizations, but will not get to friends, enemies, relatives, competitors, any other ordinary people. Here, personally, for simplicity, I believe that everyone who is not lazy reads me. So if tomorrow my whole personal life is published, I'll just shrug my shoulders. Although it will be interesting where the hole is - that is, this adventure, maybe I will write an article. As you understand, it makes no sense for the secret services to simply burn. That is if they exist at all. But the paranoid believe that they exist, yes.

Answer 2

Better go straight to the doctor.

Answer 3

1. There are chat rooms like TOX and others that don't require any phones.
2. I agree with previous speakers that it is better to use existing protocols and if you are a specialist, improve and audit them.
3. The safest type of communication for paranoia is " whispering in your ear ", while away from TVs, phones and other equipment! ..

Answer 4

Yes :)
Actually, that’s why Durov made the cart initially (we won’t turn into what it later turned into :))
Own server (hardware, not VPS), own protocol, own software server, own client, at least, and best of all, the absence of external closed libraries - but only those that have source code available, and for assembly use self-built from audited code :) (which many people forget - it's not a fact that a ready-made lib is the same with its source :) )...
True , when they come for you and ask for encryption keys (well, or whatever you have there) - you won’t be able to refuse :) Durov, you say you could. Firstly, it is not known for certain, and secondly, you will not have so much money :)