On the other hand, the group also stated that because all communication, together with plaintext and ciphertext, passes by Telegram servers, and because the server is liable for selecting Diffie–Hellman parameters, the "server should not be considered as trusted." In addition they concluded that a man-in-the-middle attack is possible https://www.telegramqwe.com/