3 ms·
That blog post seems unjustified. Quote from one of the comments: "If I understand what Moxie said earlier, the way this actually works is: every single Signal
by MrQuincle 9y ago
That blog post seems unjustified.
Quote from one of the comments: "If I understand what Moxie said earlier, the way this actually works is: every single Signal user periodically says to the Signal server, "here are (hashes of) all of the phone numbers in my contacts, which of these are registered with Signal?" Same effect, different mechanism."
It's not the case that everyone is told.
- asadlionpk 9y agoI recently had to read that post by moxie to try and implement secure contact discovery in my app. Here it is: https://whispersystems.org/blog/contact-discovery/ https://whispersystems.org/blog/contact-discovery/
- MrQuincle 9y agoReally interesting read, thanks! What did you use in the end?
- asadlionpk 9y agoIt's for a side-project with few users and I still have to take that decision. I am too scared to just upload (and store) user contacts on my end. That's a huge responsibility IMO.