4 ms·
This is a very difficult problem to solve. As far as I know (and am welcome to be corrected!), the current state of the art is remote attestation - Signal wrote
by marksomnian 6y ago
This is a very difficult problem to solve. As far as I know (and am welcome to be corrected!), the current state of the art is remote attestation - Signal wrote a post about how they're doing it for their contact discovery service[0]. It's a very limited solution though.
[0]: https://signal.org/blog/private-contact-discovery/ https://signal.org/blog/private-contact-discovery/
- cuu508 6y agoTL;DR they use Intel's SGX. Intel's 20GB data leak was on HN yesterday, with a hint that more is coming. Will be interesting to watch ;-)
- mLuby 6y agoIDK, trusting a remote system just seems bad. Either give me the data to process locally, or I'll give you some data you couldn't possibly understand and you do some stuff to it and return the results, having never known the meaning of the data. In Signal's case, they could just let you send messages that might never be received because the contact doesn't currently have the app. Also gives the receiver plausible deniability unless they respond. And could help get more people on Signal if they did the "Someone sent you a message, download the app now" trick.