X is now offering me end-to-end encrypted chat — you probably shouldn’t trust it yet

TechCrunch reports that X’s new encrypted messaging feature, XChat, has significant implementation and cryptographic weaknesses: user private keys are stored on X’s servers encrypted with a four-digit PIN, the service currently lacks perfect forward secrecy, the implementation is not open-source, and the design could permit adversary-in-the-middle or malicious-insider decryption. Cryptography experts warn the system is currently less trustworthy than established end-to-end services like Signal and recommend independent audits and proof of secure key handling (e.g., HSMs) before users trust XChat.