3 ms·
While I use Signal and am a proponent of secure messaging in general, it would be valuable to discuss the threat models for different messengers and privacy tec
by motohagiography 8y ago
While I use Signal and am a proponent of secure messaging in general, it would be valuable to discuss the threat models for different messengers and privacy techs.
Threema looks smart, and I what I think is missing from the material is what threats it addresses and how.
Does it:
- protect the content of your messages from mass interception? (appears to, barring crypto errors)
- protect the anonymity of you and your correspondents from network operators and their staff and admins?
- protect your contacts and messages from reading and exfiltration by other apps on your phone?
- protect content of your messages from corporate mobile device management tools?
- protect anonymity of correspondents and contents of messages from targeted malware that has rooted or jailbroken the device? (probably not, but wickr's aliases can mitigate it somewhat)
- protect anonymity of you and your correspondents from captive portals? (+ message secrecy/integrity)
- protect message content and correspondent anonymity from theives/attackers/co-workers with phone imaging forensic tools?
- protect group membership from infiltration using unauthorized, stolen, or cloned app memory images?
This isn't a complete threat model (I generate these for a living), but having short answers to these would go a long way to making a case for a secure messaging product.