4 ms·
If they believe that uncontrolled 3rd-party clients would make it easier to breach their protocol (because they know their protocol's weaknesses), it would make
by ambicapter 2y ago
If they believe that uncontrolled 3rd-party clients would make it easier to breach their protocol (because they know their protocol's weaknesses), it would make sense to be openly hostile to 3rd-party clients.
- littlestymaar 2y agoIf there's no third party client then the e2e is completely moot because Signal could be forced to push a backdoor to their customers and they would never know e2e has been removed.
- ambicapter 2y agoFair point, I guess it goes both ways.
- zeendo 2y agoThe strength and security of any good protocol, especially Signal's, does not come from obscurity. See https://en.wikipedia.org/wiki/Security_through_obscurity https://en.wikipedia.org/wiki/Security_through_obscurity
- SahAssar 2y agoHow would a third party client make it easier to breach the protocol? You can still study the source of the client, the protocol, make a fork of it and modify it, etc. The official client is fully open source. The argument for security for disallowing other clients would be being able to modify the protocol to patch out security issues without worrying about compatibility with other clients.