>For most people even Signal involves a central party and trust for establishing authentication. Most people do not have effective E2EE while using Signal or o

>For most people even Signal involves a central party and trust for establishing authentication. Most people do not have effective E2EE while using Signal or other systems like it. That is because they have not verified their "Safety Numbers" which is what is used in the Signal case. It is a long known (since PGP) usability problem that makes such systems impractical for most. Relevant: * https://www.ndss-symposium.org/wp-content/uploads/2018/03/09-when-signal-hits-the-fan-on-the-usability-and-security-of-state-of-the-art-secure-mobile-messaging.pdf https://www.ndss-symposium.org/wp-content/uploads/2018/03/09... Not making this issue clear (identity verification is a prerequisite for E2EE) is a common scammy thing done by various messaging systems.