4 ms·
>... something like Signal provides better cryptographic properties like forward secrecy. Forward secrecy only works up to the point your end point gets compro
by upofadown 6y ago
>... something like Signal provides better cryptographic properties like forward secrecy.
Forward secrecy only works up to the point your end point gets compromised and only for messages you have not kept. So for the vast majority of people it provides very little value.
It provides no protection against someone who breaks your encryption and something like the Signal Protocol's much greater complexity provides more opportunities to do that.
- bitdizzy 6y agoPGP isn't any better on the first point and on the second point, I would bet the money in my pocket that GPG (being the most dominant implementation of PGP) is far more complex and bug-ridden than Signal's cryptography or implementation are unsound.
- upofadown 6y agoGPG is an implementation of the OpenPGP standard. Signal Messenger is an implementation of the Signal Protocol quasi-standard. Comparing like to like, OpenPGP is much less complex than the Signal Protocol. GPG is much less complex than the Signal Messenger.