4 ms·

Is that the version that is actually deployed to their servers, though?

• fastball 5y ago
  Is that possible for Signal to prove in a meaningful way?
  • ryeights 5y ago
    Intel SGX? They are already using it for some portion of the server code.
• lkxijlewlf 5y ago
  Why wouldn't it be?
  • speedgoose 5y ago
    Backdoors.
  • kitkat_new 5y ago
    because https://www.reddit.com/r/privacy/comments/qlw1ag/signal_is_adding_a_closedsource_spam_reduction/ https://www.reddit.com/r/privacy/comments/qlw1ag/signal_is_a...
    • Klonoar 5y ago
      Surely you could link to the actual blog pose rather than a subreddit that regularly crosses the border into conspiracy theory territory.
• barbazoo 5y ago
  Isn't that impossible to prove for any OSS backend out there?
• ohthehugemanate 5y ago
  Well your signal client performs SGX remote attestation before sending any contact data to ensure that the server codebase matches a valid release. So if they're not running the published source, your client will refuse to share your contact information and social graph. Note that messages are e2e encrypted on the client side, so they don't enter into it.