7 ms·

Could Signal ever do an email service? I’d switch to it in a second. I realize I’d be sending it to insecure addresses but at least my end wouldn’t spy on me?

Could Signal ever do an email service? I’d switch to it in a second. I realize I’d be sending it to insecure addresses but at least my end wouldn’t spy on me? I just realized how dystopian that sentence is.

Anunayj 5y ago
even if they do, you have to maintain compatibility with "other" popular email providers. Protonmail encrypts all it's emails among it's own users. But at the end me with my gmail can't read them without jumping through hoops.
- mmerlin 5y ago
  Mailvelope and it's browser plugin is fairly easy for encrypting gmail (and other major email providers) conversations: https://chrome.google.com/webstore/detail/mailvelope/kajibbejlbohfaggdiogboambcijhkke https://chrome.google.com/webstore/detail/mailvelope/kajibbe...
approxim8ion 5y ago
Thing with email is that you'd also have to get everyone you talk to to move to it and ensure they don't fall back to any of the services they have been using for all this time for convenience's sake. At which point, it doesn't even matter if it is email behind the scenes or something else. There's also the issue of SMTP being very metadata heavy and there being no option to mitigate or encrypt any of the metadata. Which is why something like Delta Chat (if you haven't heard of it, it's basically Signal/WhatsApp like IM piggybacking over email) isn't very private.
mmerlin 5y ago
The guerilla growth marketers working for Signal would probably be unable to resist the viral temptation of spamming all your email address list who have already joined signal to "let them know" about your newly installed contact channel. I was super-annoyed when two people from my distant past started trying to contact me via Signal purely because of the unwanted and un-asked for behaviour of vacuum-and-spam notification of my phone contact list (which had accumulated from before 2000) who were in the subset of already-Signal-members. In particular one huckster I lost $22k to, and who I came close to being liable for taking illegal action on behalf, through his fraudulent lack of full disclosure, who I had thoroughly removed from all my social media, plus filtered his email straight to trash, and permanently blocked from calling my phone. Because his phone number was in my address book (so I could block him) Signal thought it had the right to let him know he can now contact me. Poor form there Signal...
- egberts1 5y ago
  write a big report?
  - wizzwizz4 5y ago
    They already know about the problem; they've known for years now.
- egberts1 5y ago
  i am going to stop you there. The mere fact that you had a phone number in your address book is what made your locally client-side Signal app made the notification… locally. This newly discovered mechanism does not alert the remote Signal app. Just the mere fact that you allowed Signal app access to your local address book and actually ran all numbers against the central server is not clearly stated in their type of service (TOS). This is the primary reason why i never let Signal app have access to my Contacts/address-book. This is why we have no idea what else Signal is doing with remote phone numbers found in our address book. I was able to ascertain between two phones of this one-sided aspect (but for how long)?
  - mmerlin 5y ago
    Yes! I expect any app or service to at least warn me first before they instigate unsolicited actions on my behalf. Signal has no doubt already legally covered their ass with regards to me giving this consent. However in reality I never would have allowed this if I was asked or even given a fraction of a hint as to what was about to happen once I gave them the requested permissions to be installed.
    - charrondev 5y ago
      One of the things I quite enjoy about the legal system in Quebec is our strong consumer protection laws. Additionally it is not possible for a consumer to “wave” any rights provided in our consumer protection act. That along with numerous parts of the law defining exactly what can be a binding contract create a system (with ample case law and precedent to back it up) where most company’s terms and conditions are not valid contracts in Quebec. If someone here were able to show harm and have standing in a case they would likely be able to bring a solid case forward.

Anunayj 5y ago

even if they do, you have to maintain compatibility with "other" popular email providers. Protonmail encrypts all it's emails among it's own users. But at the end me with my gmail can't read them without jumping through hoops.

mmerlin 5y ago
Mailvelope and it's browser plugin is fairly easy for encrypting gmail (and other major email providers) conversations: https://chrome.google.com/webstore/detail/mailvelope/kajibbejlbohfaggdiogboambcijhkke https://chrome.google.com/webstore/detail/mailvelope/kajibbe...

approxim8ion 5y ago

Thing with email is that you'd also have to get everyone you talk to to move to it and ensure they don't fall back to any of the services they have been using for all this time for convenience's sake. At which point, it doesn't even matter if it is email behind the scenes or something else. There's also the issue of SMTP being very metadata heavy and there being no option to mitigate or encrypt any of the metadata. Which is why something like Delta Chat (if you haven't heard of it, it's basically Signal/WhatsApp like IM piggybacking over email) isn't very private.

mmerlin 5y ago

The guerilla growth marketers working for Signal would probably be unable to resist the viral temptation of spamming all your email address list who have already joined signal to "let them know" about your newly installed contact channel. I was super-annoyed when two people from my distant past started trying to contact me via Signal purely because of the unwanted and un-asked for behaviour of vacuum-and-spam notification of my phone contact list (which had accumulated from before 2000) who were in the subset of already-Signal-members. In particular one huckster I lost $22k to, and who I came close to being liable for taking illegal action on behalf, through his fraudulent lack of full disclosure, who I had thoroughly removed from all my social media, plus filtered his email straight to trash, and permanently blocked from calling my phone. Because his phone number was in my address book (so I could block him) Signal thought it had the right to let him know he can now contact me. Poor form there Signal...

egberts1 5y ago
write a big report?
- wizzwizz4 5y ago
  They already know about the problem; they've known for years now.
egberts1 5y ago
i am going to stop you there. The mere fact that you had a phone number in your address book is what made your locally client-side Signal app made the notification… locally. This newly discovered mechanism does not alert the remote Signal app. Just the mere fact that you allowed Signal app access to your local address book and actually ran all numbers against the central server is not clearly stated in their type of service (TOS). This is the primary reason why i never let Signal app have access to my Contacts/address-book. This is why we have no idea what else Signal is doing with remote phone numbers found in our address book. I was able to ascertain between two phones of this one-sided aspect (but for how long)?
- mmerlin 5y ago
  Yes! I expect any app or service to at least warn me first before they instigate unsolicited actions on my behalf. Signal has no doubt already legally covered their ass with regards to me giving this consent. However in reality I never would have allowed this if I was asked or even given a fraction of a hint as to what was about to happen once I gave them the requested permissions to be installed.
  - charrondev 5y ago
    One of the things I quite enjoy about the legal system in Quebec is our strong consumer protection laws. Additionally it is not possible for a consumer to “wave” any rights provided in our consumer protection act. That along with numerous parts of the law defining exactly what can be a binding contract create a system (with ample case law and precedent to back it up) where most company’s terms and conditions are not valid contracts in Quebec. If someone here were able to show harm and have standing in a case they would likely be able to bring a solid case forward.