Allowing third party clients that provide identity verification signatures would be totally excellent, and I would support that. Signal does this today by veri

Allowing third party clients that provide identity verification signatures would be totally excellent, and I would support that. Signal does this today by verifying phone numbers themselves, so they’d have to continue doing so centrally; “never trust the client” applies to their own client just as much as anyone else’s, and “allow unverified users to initiate contact with strangers” is the spam vector infecting all modern telephony (thus STIR/SHAKEN). So with that need resolved, the biggest risk of third party clients would be intentionally compromised code within an attractive wrapper — but the only way to defend against that is to not allow third party clients at all. So.. I guess I no longer support third-party clients, having worked through the timelines of what will occur. Ah well.