5 ms·
Short-medium term you have the advantage that the Signal codebases are open source, thus much easier to audit. There have been a number of independent security
by grlass 6y ago
Short-medium term you have the advantage that the Signal codebases are open source, thus much easier to audit.
There have been a number of independent security audits over the years, which are easy to find. WhatsApp code was never open, even pre-Facebook.
- antibuddy 6y agoOkay, that is indeed an advantage I forgot about.
- AshamedCaptain 6y agoA bit for the worse in practice due to the non-federated server meaning you have to trust they run the server code they claim to run. On the client side I find their interest on self-updating problematic (since they may silently push updates to specific users), but at least you do have the option to remove it.
- JosephRedfern 6y agoI'm a big fan of Signal and have been encouraging friends and family to use it. That said, I (like others) am a bit concerned about the lack of updates to Signal-Server (https://github.com/signalapp/Signal-Server/commits/master https://github.com/signalapp/Signal-Server/commits/master). Commits seemed to suddenly stop April last year, and I'd be very surprised if the actual Signal Server that's running in production hasn't been updated over such a long period. Would be very happy to be proven wrong here, or to be pointed in the direction of anything that might explain the lack of activity.