4 ms·
Isn't Signal open source? How could it be a honeypot? The community should be able to verify e2e encryption fairly easily.
by grumple 4y ago
Isn't Signal open source? How could it be a honeypot? The community should be able to verify e2e encryption fairly easily.
- vbezhenar 4y agoBugs and backdoors are indistinguishable. No software is bug-free. App stores make repeatable builds hard to achieve. Another vector to introduce changes. Might just be convenient target to attack via other means (e.g. rogue android update targeted for this special app). I'm just a bit paranoid recently, I don't have any proofs or something like that. I, personally, would use Signal today as off-the-shelf easy-to-use solution. But for something that's absolutely must not be disclosed I'd use age (write message in text file, encrypt it via age, send base64. Supports symmetric and asymmetric encryption, schemes are simple enough, software is popular enough and super-focused.