2 ms·

Can you point to the parts in the spec for the TextSecure protocol where this information is leaked? I was under the impression that a passive adversary could g

Can you point to the parts in the spec for the TextSecure protocol where this information is leaked? I was under the impression that a passive adversary could get * Time of Tx to Signal server * Rough message length * Time of Tx of message from Signal server to recipient (assuming that they were listening on that path, too) Is my understanding incorrect? Can a passive adversary inspect the data from a TextSecure/Signal client and determine more (or just the above) information from the data sent from the TS client to the TS server?

Arnt 11y ago
No single passive adversary gets all three. The information moves from the phones to *.whispersystems.org, then in a big fat stream to Google, then from Google to the recipient phones.
- simoncion 11y ago
  > No single passive adversary gets all three. If the passive adversary has enough listening posts, it's totally possible for them to be reasonably certain that they probably got all three, unless some sufficiently clever stuff is happening either at the WS servers, or in Google's servers.