3 ms·
The messages and calls are routed through their servers, so they could (but do not) store whatever metadata is required to route messages and calls. This would
by lorenzhs 10y ago
The messages and calls are routed through their servers, so they could (but do not) store whatever metadata is required to route messages and calls. This would at least be the recipient's account and IP address, the sender's IP address (but not necessarily their account), and the current time.
I believe the GP is echoing zeverb's sentiment, that it would be preferable if OWS (Signal) could not even be ordered to collect such data.
The thing I don't understand about the GP's post is "but someone else could be storing it". I would expect the entire message (including headers / metadata) to be encrypted in transit, with a pinned key, so that only OWS has access to the routing metadata. Please correct me if I'm wrong.
- woah 10y agoSomeone exploiting a security vulnerability in Signal's servers could be storing the metadata.