There are two legitimate concerns about Signal: they use real phone numbers as identifiers, and you have to trust Signal as the server operator as they don’t allow their client to be used with other servers. While the server software is also open source, you have to trust that they’re running the same version in production.
I agree; however, the second point I don’t see as Signal specific. In any service, how do you verify that a server is running unmodified open source code? For the vast majority of people, they are also depending upon the client being unmodified.
If you could run your own Signal instance, then that could help alleviate concerns of bad faith operators. That’s what Session is essentially (started as a fork of Signal): https://getsession.org
I’d argue another concern is Signal hosting data in the U.S.A. rather than a country with stronger data privacy laws and one that isn’t part of fourteen eyes. The phone number requirement is my biggest issue though.
@realcaseyrollins@RandomBit If Signal is ditching SMS, they aren’t going to support RCS. Not to mention nobody other than Google (and via Google’s direct offer, Apple) have the keys to use it.
What security issues does Signal have?
There are two legitimate concerns about Signal: they use real phone numbers as identifiers, and you have to trust Signal as the server operator as they don’t allow their client to be used with other servers. While the server software is also open source, you have to trust that they’re running the same version in production.
With e2e encryption, you don’t need to trust the server, you only need to trust the clients.
I agree; however, the second point I don’t see as Signal specific. In any service, how do you verify that a server is running unmodified open source code? For the vast majority of people, they are also depending upon the client being unmodified.
If you could run your own Signal instance, then that could help alleviate concerns of bad faith operators. That’s what Session is essentially (started as a fork of Signal): https://getsession.org
@sickmatter @dirtmayor @jmcs @RandomBit @realcaseyrollins
I’d argue another concern is Signal hosting data in the U.S.A. rather than a country with stronger data privacy laws and one that isn’t part of fourteen eyes. The phone number requirement is my biggest issue though.
@PublicLewdness @dirtmayor @jmcs @sickmatter @RandomBit @realcaseyrollins Signal was forked to create Session
Delta Chat is better then
Telegram
Whatsapp
Signal
Session
Delta Chat -
Open Source
De Centralised
No app mandate
No SMS mandate
Works with pop3/smtp email
No Cloud
Not “Russian”
Not “American”
Delta Chat
Website delta.chat/en/
App f-droid.org/en/packages/com.b44t.messenger/
My video on Delta Chat
joshwhotv.com/v/.73TrMQ
deleted by creator
@verita84 @charliebrownau @RandomBit @dirtmayor @jmcs @realcaseyrollins @sickmatter
Oh noes having options is le bad ! Better just use whatever is popular.
deleted by creator
@verita84 @dirtmayor @jmcs @sickmatter @PublicLewdness @RandomBit @realcaseyrollins They could be using
IRC
XMPP
EMAIL
Delta Chat
The fault is theirs , not mine
deleted by creator
@PublicLewdness @dirtmayor @jmcs @sickmatter @verita84 @RandomBit @realcaseyrollins Keep using
((( Corporations )))
((( Goverment )))
((( Apps )))
((( Android )))
((( Cloud )))
((( SMS))
Also keep voting
Keep praying
and keep paying tax
aka
Put your head in the sand and refuse to take a stance
Have you got your barcode on the back of the neck yet sheeple
@RandomBit I’m not aware of exactly what issues #Signal has, but I know it’s centralized so I’m not a big fan of that
Yes, it’s not ideal. Decentralized key distribution seems to be a intractable problem for mass adoption.
@RandomBit That said if #Signal ever supports #RCS I’d strongly consider getting it, since half my siblings are on #RCS
@realcaseyrollins @RandomBit If Signal is ditching SMS, they aren’t going to support RCS. Not to mention nobody other than Google (and via Google’s direct offer, Apple) have the keys to use it.
Sort of off topic but are you replying from Mastodon?
@pootedesu Yep!
That is pretty cool. I’m just figuring out how this all works so seeing 2 platforms melding into one comment thread is still like magic to me.