5 ms·
> Signal has a central, proprietary server. The signal-server repository is open source
by pcthrowaway 1y ago
> Signal has a central, proprietary server.
The signal-server repository is open source
- afroboy 1y agoAnd it doesn't matter if it's open source or not. because messages are encrypted P2P.
- jchook 1y agoCritical portions of the server are not FOSS. Also the core software forces you to join their servers. Also we have no proof that they are running the server software published on GitHub. This concern is exacerbated by the fact they didn't publish server code updates for many months.
- pcthrowaway 1y agoI mean sure, but also, the client app source code lets us know that unencrypted data is not sent to the server. So at best they could perhaps be collecting some additional metadata, but I don't think it's a whole lot