4 ms·
Not saying much. Same is true about any e2e encrypted messaging (Telegram, Signal, etc.) There's no way to tell if they are intercepting your messages clientsi
by tantalor 4y ago
Not saying much. Same is true about any e2e encrypted messaging (Telegram, Signal, etc.)
There's no way to tell if they are intercepting your messages clientside, and you'd have to monitor all the network traffic (which would be encrypted with their keys) to detect exfiltration.
- sneak 4y agoNo. Signal is not redownloaded from Signal each time you launch the app, unlike javascript web apps.
- tantalor 4y agoYou're 100% sure they didn't already ship the code and have the ability to flip a flag to enable message interception per user? Or the ability to execute arbitrary external code?
- sneak 4y agoSignal's feature flags are public as the client is open source and anyone can retrieve the feature flags from the server. You can also run your own self-built client (alternative implementations are available) and forward the messages securely any way you wish. Such subterfuge would not remain undetected. Signal is e2ee in ways that iMessage and WhatsApp are not.