4 ms·
Signal is centralized, so it becomes a huge target of all kinds of hackers and three-letter agencies. This alone is sufficient for me to never touch it. And the
by fsflover 1y ago
Signal is centralized, so it becomes a huge target of all kinds of hackers and three-letter agencies. This alone is sufficient for me to never touch it. And then, there is this:
https://news.ycombinator.com/item?id=42788647 https://news.ycombinator.com/item?id=42788647
https://news.ycombinator.com/item?id=39445976 https://news.ycombinator.com/item?id=39445976
- JuniperMesos 1y agoIf the open source client encryption is good enough, it shouldn't matter if the CIA itself is openly running the centralized portion of Signal.
- fsflover 1y agoI'm not an expert, but it doesn't look so simple: https://news.ycombinator.com/item?id=39421128 https://news.ycombinator.com/item?id=39421128 https://news.ycombinator.com/item?id=39445976 https://news.ycombinator.com/item?id=39445976
- upofadown 1y agoThe vast majority of people using "end to end encrypted" messaging systems fail to verify the identity of their contacts. So those running the servers can fairly trivially MITM the messages. So in practice it does matter who controls the servers.
- heinrich5991 1y agoThe good thing is that verifying the other contact is invisible to the server in Signal. This means that it's stochastically sufficient that a few people do check their contacts in order to see whether there is any widespread MITMing going on.