3 ms·
Signal is on route to add contact/data recovery: https://www.signal.org/blog/secure-value-recovery/ https://www.signal.org/blog/secure-value-recovery/ ... the
by Certhas 7y ago
Signal is on route to add contact/data recovery:
https://www.signal.org/blog/secure-value-recovery/ https://www.signal.org/blog/secure-value-recovery/
... they also cite this as a bottleneck for adding non-phone identifiers. It seems like they are putting the infrastructure in place to fix a lot of the remaining usability issues that people have with them.
- gojomo 7y ago'Secure Value Recovery' that will rely on their newfangled, Intel®-SGX-dependent trustworthy cloud key services. Why do they need me to trust Intel, or novel crypto/software that might be deployed in... when exactly? Why can't they let me just trust the same secure backups that all my other sensitive data/communications are in?
- Groxx 7y agoSGX that, as a user, you can't even verify is in use. I really don't know why they're focusing on things like this. It does nothing to increase evidence-based trust, so it's no better than saying "we added a rate limiter, and delete keys after X attempts" (which I'd be totally fine with, and they could probably put in place in practically no time). Either way you're still relying on them doing what they said they're doing.