4 ms·
Why do Signal releases contain an expiration time bomb? That is, why is the user forced to update in order to use the application, even if no critical security
by bluefox 6y ago
Why do Signal releases contain an expiration time bomb?
That is, why is the user forced to update in order to use the application, even if no critical security issues arose?
The passage of time is not a good excuse for a mandatory update.
- anjbe 6y ago> That is, why is the user forced to update in order to use the application, even if no critical security issues arose? Because they’re adding new features, both security improvements and user‐facing sugar. Moxie’s thoughts on this are well‐known: he believes he can build a better and more secure messenger by keeping deployed clients as closely aligned as possible. Even if you disagree (and plenty of people disagree, as we see in almost every Signal comment thread), it’s at least a valid opinion to hold. https://signal.org/blog/the-ecosystem-is-moving/ https://signal.org/blog/the-ecosystem-is-moving/
- bluefox 6y agoSo when Signal decides to stop supporting your device, you're left with no choice but to get a new one. So there's no point in auditing a Signal release. So as Signal becomes more and more disagreeable (something that's bound to happen with any actively changing software), you're forced to take it or leave it. It's a trap. I am a user of Signal, and have been using it for a number of years now, but this concern remains.
- rakoo 6y agoUntil you have a contract with someone explicitely saying what you want and what you don't want, no one owes you anything. Signal creators are doing it this way because they decided it's the best way to bring the best cryptography available to the masses, considering that they don't earn any money.