4 ms·

Except Signal's client is open source with reproducible builds that have been audited. Their crypto is open, based on standard primitives, and has also been aud

Except Signal's client is open source with reproducible builds that have been audited. Their crypto is open, based on standard primitives, and has also been audited. It's also true E2E encryption with alerts on key changes. The only weakness clear to me is the US could force them to release a compromised client. But then auditors would probably notice within weeks, or even days, and their reputation would be ruined forever.

fsflover 1y ago
https://github.com/signalapp/Signal-Android/issues/13842 https://github.com/signalapp/Signal-Android/issues/13842
- fsflover 1y ago
  The corresponding submission: https://news.ycombinator.com/item?id=44240318 https://news.ycombinator.com/item?id=44240318
- paulryanrogers 1y ago
  That's a shame. Still on the whole Signal seems far ahead of Telegram. Hopefully users who need the extra security will be taught to enable that setting.
  - fsflover 1y ago
    But is it far ahead of Matrix?
    - paulryanrogers 1y ago
      Does Matrix default to E2E yet? With forward secrecy? If so great! More is better
      - Arathorn 1y ago
        yup, for the last 5 years: https://matrix.org/blog/2020/05/06/cross-signing-and-end-to-end-encryption-by-default-is-here https://matrix.org/blog/2020/05/06/cross-signing-and-end-to-...
        AAAAaccountAAAA 1y ago
        Don't know about that. https://discuss.privacyguides.net/t/so-can-pfs-be-enabled-in-matrix-at-all/12036 https://discuss.privacyguides.net/t/so-can-pfs-be-enabled-in... According to this, it by default implements it for batches of 100 messages or something. And for slow-paced messaging, it is quite a lot. No idea why, maybe doing it somehow else would make the already bad performance even worse.