4 ms·
It's still end-to-end encrypted though, so all google can hand over is random data.
by pilif 10y ago
It's still end-to-end encrypted though, so all google can hand over is random data.
- grandalf 10y agoNot with app engine's default cert that matches *.google.com Google has the private keys and would likely happily siphon off any data requested by said regimes.
- penagwin 10y agoBut send google data that is encrypted with your keys. You encrypt the message, and then encrypt it AGAIN with google certs. So all google sees are encrypted messages.
- cyphar 10y ago> Not with app engine's default cert that matches *.google.com The actual messages are encrypted by Signal's crypto, not just SSL. Signal is just using Google as a dumb transport layer. Tor has a similar censorship circumvention mode which uses its own crypto over an SSL connection to App Engine I'm not a fan of Google, but you're just spreading FUD.
- grandalf 10y agoDo you think Google would decline to provide IP addresses or logs or any other information to the regimes?
- cyphar 10y agoISPs in those countries would already have that information, so if you're in such a regime Google will not add any extra concerns in that regard. Not to mention that Signal does actually work if you tunnel it over Tor (you have to root your phone and force everything through it). So if someone was _really_ worried they could use Tor as well. You're still spreading FUD.