5 ms·
From the Signal blog post: > To prevent abuse, clients derive a 96-bit delivery token from their profile key and register it with the service. The service requ
by wskinner 8y ago
From the Signal blog post:
> To prevent abuse, clients derive a 96-bit delivery token from their profile key and register it with the service. The service requires clients to prove knowledge of the delivery token for a user in order to transmit “sealed sender” messages to that user.
- forapurpose 8y agoThey add: > Additionally, blocking a user who has access to a profile key will trigger a profile key rotation. People who don't know you can't use the new sender privacy beta feature, but if you are willing to risk spam then you can allow everyone to use it: > users who want to live on the edge can enable an optional setting that allows them to receive incoming “sealed sender” messages from non-contacts and people with whom they haven’t shared their profile or delivery token. This comes at the increased risk of abuse, but allows for every incoming message to be sent with “sealed sender,” without requiring any normal message traffic to first discover a profile key.