4 ms·

The Signal client is open source. The back end not so much. A lot of Signal is basically "trust Moxie".

• frabbit 7y ago
  And most of that is coming from MattGreen and Ptacek.
• eitland 7y ago
  > A lot of Signal is basically "trust Moxie". Let me come out and defend Signal (I usually defend Telegram, but I don't think we should be unfair to anyone): As far as I am aware no one who knows what they are talking about has come out with anything that says Signals end-to-end encryption is broken. If I have understood it correctly an as long as that is true, NSA, FSB and the Chinese might be running the message handling together and there's still no reason to be worried that your messages will be intercepted in transit. Disclaimer: - as far as I am aware Signal is the safest messenger available for everyone - even if all the above is true you are still trusting them with your metadata. I think they are good people. If you are scared of them, be aware that they know who you talk to and when. This is however true for any mainstream technology as far as I am aware. - being good at crypto doesn't make them immune to bugs. There was a nasty vulnerability a few months ago that was remotely exploitable. Again, this is the same, or even worse for every other messenger.
  • blotter_paper 7y ago
    > This is however true for any mainstream technology as far as I am aware. It's too bad bitmessage can't scale :/
  • f1refly 7y ago
    >As far as I am aware no one who knows what they are talking about has come out with anything that says Signals end-to-end encryption is broken. You have to check xmpp with omemo, it has libre servers and in federated