19 ms·
I think you're saying that Signal is not perfect, and I agree, but there's just nothing better at the moment. Email encryption is a bad reference because it has
by hiq 5y ago
I think you're saying that Signal is not perfect, and I agree, but there's just nothing better at the moment. Email encryption is a bad reference because it has negligible usage (in comparison with modern messengers) and has proved over the years that it cannot cater to the needs of Signal's current users. But even then, I don't think we can claim that getting the email encryption setup right is any easier than ensuring one hasn't been MITMed during the initial key exchange on Signal.
- upofadown 5y agoIn terms of usability, Signal is not that great. In a usability study involving Signal[1], 21 out of 28 computer science students failed to establish and maintain a secure end to end encrypted connection. I am old enough to be pretty cynical about this stuff. People keep on coming up with purely technical solutions to the encrypted messaging problem. They all eventually fall down on the human side. This isn't working. We have to do something else. [1] https://www.ndss-symposium.org/wp-content/uploads/2018/03/09-when-signal-hits-the-fan-on-the-usability-and-security-of-state-of-the-art-secure-mobile-messaging.pdf https://www.ndss-symposium.org/wp-content/uploads/2018/03/09...