3 ms·
I mean, for a start the messages are stored locally, it doesn't protect the messages server-side, because they are never stored on the server. All the pin does
by fao_ 6y ago
I mean, for a start the messages are stored locally, it doesn't protect the messages server-side, because they are never stored on the server. All the pin does is keep the server-side data, i.e. your address book and conversation information, safe.
Secondly, outside of encryption, it should not be Signal's job to enforce whether a logged-in user of a phone can see that user's content. It is the operating system's job to enforce user-level security, and users of Signal are unlikely to keep their phones without a pin, fingerprint, or other level of authentication.
The fact that you cannot turn off the option to lose all your messages when you lose a pin that you have been forced to set is horrific for those of us that rely on conversation history as a memory aid, and is precisely the reason why I have refused to set a pin.
- msh 6y agoWell most mobiles don't offer multi user and phones are often loaned temporarily to other people. For example for kids to play on.
- fao_ 6y agoAndroid 9 and 10 has multi-user. And if you take into account the "lending phones to kids" scenario it gets worse because that just means that when your 4yro kid gets your phone they can irrecoverably delete all your messages, simply by playing around with it.