3 ms·
I'm confused here. It seems the identities are trivially linkable via the IP address. The Signal servers can't determine cryptographically that the message ori
by esotericn 8y ago
I'm confused here. It seems the identities are trivially linkable via the IP address.
The Signal servers can't determine cryptographically that the message originates from Device A. But it is certainly from device A, because this isn't a peer to peer protocol.
It seems to me like what you'd need to make this work is some sort of intermediate layer, a bit like onion routing, that would have messages arrive at the Signal servers without basically giving everything away in the source IP field.
With general use of NAT there's a N-to-one mapping of identities to IP addresses, sure, but this seems to be technically true whilst in many cases completely erasing any benefit of this entirely.
- ric2b 8y agoI think the point is that they can simply discard IP addresses as soon as they receive the message. If later they get a request from the NSA to look at their database, the undelivered messages can no longer be traced back to the sender.
- esotericn 8y agoAha! I see now. So it's a temporal thing. Previously, an undelivered message would have to sit on Signal's servers with the sender's metadata in cleartext. Now, it doesn't.