3 ms·
This is about the server which is not open source and even if it was you wouldn't know if they actually run that code without modifications
by Klasiaster 5y ago
This is about the server which is not open source and even if it was you wouldn't know if they actually run that code without modifications
- hiq 5y ago> This is about the server which is not open source The Signal server implementation is mostly open-source, and some users managed to run their own instance. > you wouldn't know if they actually run that code without modifications That's the point of SGX, but even without it, most guarantees you get from the Signal protocol come from the clients. E.g. you don't need to know what the server is running to ensure that the content of your messages is not leaking. Other than that, being decentralized on its own doesn't magically solve the metadata problem. Signal leaks less metadata than most messengers, including decentralized ones.