3 ms·
The point of signal is that you do not need to trust the middleman due to e2ee about your actual communication (but this does not include your metadata where yo
by dependenttypes 7y ago
The point of signal is that you do not need to trust the middleman due to e2ee about your actual communication (but this does not include your metadata where you do need to trust their servers - and there is no way to prove that they run the code that they claim to run)
As for the actual client, see https://signal.org/blog/reproducible-android/ https://signal.org/blog/reproducible-android/
Right now signal is not fully reproducible so you can't trust that the binary that they distribute does not use a different code.
- hestefisk 7y agoI know that the point of Signal is zero-trust, but a savvy middle man could still use large scale information about source and destination of encrypted packets for useful intelligence. Just like NSA would find it useful to inspect email headers despite the email body being encrypted.