>Services like Signal are great because they're E2EE by default and they're user friendly. Signal might be a bad example because it is not really that user fri

>Services like Signal are great because they're E2EE by default and they're user friendly. Signal might be a bad example because it is not really that user friendly when it comes to the hard bit. That is: confirming that you are actually connected to who you think you are connected to and not some third party. In a usability study involving Signal[1], 21 out of 28 computer science students failed to establish and maintain a secure end to end encrypted connection. We should not kid ourselves into thinking that the usability of end to end encrypted messaging has been solved. It is very much still an outstanding issue. [1] https://www.ndss-symposium.org/wp-content/uploads/2018/03/09-when-signal-hits-the-fan-on-the-usability-and-security-of-state-of-the-art-secure-mobile-messaging.pdf https://www.ndss-symposium.org/wp-content/uploads/2018/03/09...