4 ms·
This is CISA telling potential target civilians (and government employees in their civilian capacity, since government employees talk to their friends too) what
by amalcon 1y ago
This is CISA telling potential target civilians (and government employees in their civilian capacity, since government employees talk to their friends too) what to do to protect themselves. The government has separate, much stricter guidelines for security compliance for cloud services used by the government.
Those guidelines are called FedRAMP, and Signal is not FedRAMP certified.
- leereeves 1y agoIt specifically says it is addressed to senior government officials. Also, I don't know for sure, but there was a link and discussion here not long ago saying that Signal is pre-installed and widely used at the CIA. https://news.ycombinator.com/item?id=43478091 https://news.ycombinator.com/item?id=43478091
- amalcon 1y ago> It specifically says it is addressed to senior government officials. Sure, because senior government officials sometimes do things outside of their official capacity. If a senior government official's communications with their therapist or their lawyer e.g. are compromised, this could leave them vulnerable to blackmail. That's bad for everyone. Re: other post about use of Signal, I'm not commenting on that post and/or that issue. I'm not expressing an opinion either way on whether it's relevant to this issue. I just want to point out that FedRAMP exists, and Signal isn't FedRAMP certified. If you don't think that is important (and a lot of reasonable people don't), you do you.