3 ms·
It all comes down to truth in advertising. Such misrepresentations are very common these days. Even Signal is not entirely innocent here. Signal only has the po
by upofadown 3y ago
It all comes down to truth in advertising. Such misrepresentations are very common these days. Even Signal is not entirely innocent here. Signal only has the potential to have end to end authentication/encryption. By default you trust Signal, Twilio and the phone company. The app/documentation does not make it entirely clear to the user that verifying the "Safety Number" is critical to establishing an end to end connection with someone. From the Signal documentation:
>Verification of safety numbers is a good security practice for sensitive communication.
It is perfectly OK for a user to trust, say, Tutanota to not take an affirmative action to get access to their messages. We need a way to express this sort of tradeoff and providers should be required to put this expression where the user can see it and understand it.
- delfinom 3y ago>It all comes down to truth in advertising Understatement. Tutanota published a ranty blog post accusing Microsoft of suppressing competition in the email space. Because they didn't understand how fucking Azure works or even how corporate security works. They literally let users register email addresses for @tutanota.com At the same time, they are using @tutanota.com for internal corporate and such they had an Azure AD Tenant already registered for that domain. They complained that their tutanota.com email users couldn't register Microsoft accounts and this was all part of Microsoft's ploy to eliminate them. No, they compromised themselves and unless they grew a brain, are still compromised for corporate communications.
- laurentlbm 3y agoThat's hilarious!