Skip to main content


Signal CTO answers public's questions


cross-posted from: lemmy.world/post/49760662
in reply to Eager Eagle

How anyone trusts a centralized server is beyond me.
in reply to warmaster

deltachat!

For most people, signal is the first step.

it was hard enough persuading people to talk to me on signal rather than FB messenger/whatsapp etc

This entry was edited (3 days ago)
in reply to Tundra

Their architecture is incredible, but I do agree that bringing people over is difficult. Scanning QR codes or clicking links to add someone as a friend on a social network is strange. On Discord, links are basically vectors for attacks, and avoiding them is good practice.

Still waiting for Delta to implement forward secrecy, which would require PGP to implement it first, if I understand correctly.

in reply to XLE

As far as i know they use autocrypt Which I think includes pgp. Maybe its the dependency on pgp but basically there is work on autocrypt to Support pfs.

BTW until quite recently Signal didnt have (proper?) pfs either although its hailed as one of the pinnacles of private and secure messaging

This entry was edited (2 days ago)
in reply to Shrouded0603

Signal has had proper PFS for a long while - since 2013 or so. The double ratchet algorithm was a huge deal!
in reply to warmaster

That's the neat part: you don't.
in reply to warmaster

Because it's the most secure app I can actually get people to install.

If you have friends or family privacy conscious enough then sure, use something different, or shoot, even self host. But for everyone else, even getting them to use Signal is a difficult feat.

in reply to warmaster

This entry was edited (2 days ago)
in reply to warmaster

Because it's tested. Seriously. Maybe it's compromised in some way, but we haven't seen any evidence of that yet, rather we have seen cases where it was very good at protecting people. You may be suspicious, but it can be a mistake to treat suspicion as fact. The problem with a lot of the alternatives, is that they haven't been so broadly 'tested'. We don't have enough data to really trust them IMO.
in reply to Hanrahan

Calling someone an asshat for offering a free of charge service for you is somewhat entitled.