4 ms·
Just to clarify, this is within the Signal app settings—not the OS (iOS or Android) system settings. Critical distinction, as merely changing OS notification s
by nickburns 6mo ago
Just to clarify, this is within the Signal app settings—not the OS (iOS or Android) system settings.
Critical distinction, as merely changing OS notification settings will simply prevent notification content from being displayed on-screen.
- JumpCrisscross 6mo agoSignal should switch the default to being less verbose.
- nickburns 6mo agoThe default should be "No name or content".
- JumpCrisscross 6mo agoName only strikes me as a fairer compromise between security and usability.
- loeg 6mo agoI thought name-only was the default.
- JumpCrisscross 6mo ago> I thought name-only was the default At least for me, it was name and content.
- loeg 6mo agoI may be misremembering, or it may have changed; I've been using Signal from the early days.
- fragmede 6mo agousers should switch to simpleX
- iknowstuff 6mo agoNot really, that would discourage use by normies.
- avidiax 6mo agoThey should also signal your counterparty's security posture. Basically, give you a heads up that the other side has settings that make the system less secure.
- Terr_ 6mo agoI'd prefer the receiving end looks at sender's metadata on the message, and uses that to determine where the line is between recipient-convenience and betrayal. I suppose you could do both, but "Hey I've got something extra important to send you, but it says need to change your settings first please hurry" seems worse than "sometimes I don't get full notifications on my watch, weird."
- stavros 6mo agoNo it shouldn't. That makes the UX much worse, just to guard against the 0.00001% case where the FBI seizes your iPhone.
- hammock 6mo agoWait so if I do iOS setting notifications > never show previews it’s still caching them in the background? Unencrypted?
- nickburns 6mo agoYes. And technically, from a privacy perspective, it's even worse than that. What's additionally happening is they're still 'syncing' back to Apple servers via APNS (and to Alphabet servers via Firebase on Android)—even with notifications completely disabled, that's correct. If the app generates them, the OS receives them. That's why the Signal app offers this setting.
- gruez 6mo ago>it's even worse than that. What's additionally happening is they're still 'syncing' back to Apple servers via APNS (and to Alphabet servers via Firebase on Android)—even with notifications completely disabled, that's correct. Source? I don't think either OS implements notification syncing between devices, it's only one way, and as others have mentioned, the actually push notification doesn't contain any message content, only an instruction for signal to fetch and decrypt the message.
- schrodinger 6mo agoThis sounds correct. When I implemented push notifications for an iPhone application, I remainder needing to obtain a store a separate token for each device a user has, and subscribing to a feed of revoked delivery tokens. Seemed like an interesting design intended to facilitate E2E encryption for push notifications.
- dataflow 6mo ago> I don't think either OS implements notification syncing between devices Can't speak for iOS and no idea if this relates to the above functionality, but Pixel lets you deduplicate notifications across Pixel devices.
- jerlam 6mo ago
- wodenokoto 6mo agoWhen you put it up against each other it makes perfect sense, but I would never have thought about it in that way! Thank you for adding this to the conversation.