526

Signal is not the place for top secret communications, but it might be the right choice for you – a cybersecurity expert on what to look for in a secure messaging app (theconversation.com)

submitted 1 week ago by florencia@lemmy.blahaj.zone to c/privacy@lemmy.ml

108 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] 9tr6gyp3@lemmy.world 20 points 1 week ago

Actually RCS has encryption in the new spec now, and we could see encrypted RCS messages implemented on iOS and Android within a year.

But even so, use Signal.

[-] Supernova1051@sh.itjust.works 42 points 1 week ago

RCS still leaks metadata like a sieve. Encryption, considering the platforms that exist today (Signal and SimpleX), should not be the minimum requirement. Plain-text messaging should not even be possible in modern secure messaging platforms. The platform should be open source and be engineered to mitigate the collection of metadata - like Signal and SimpleX.

[-] 9tr6gyp3@lemmy.world 2 points 6 days ago

Seeing as RCS with encryption based on the MLS standard hasnt been deployed yet, can you show exactly what metadata is leaking?

[-] Supernova1051@sh.itjust.works 2 points 5 days ago

MLS only deals with encryption and key management, which is great but that's been a "solved" problem since TextSecure (now Signal) introduced the TextSecure Protocol (now the Signal Protocol) in 2013.

What I'm aware is missing with RCS / MLS compared to Signal (someone with more recent knowledge please correct me):

Sealed sender so only the recipient knows who sent the message.
Not storing metadata or logs.
No built in crash reports.
Private contact discovery.
Published government requests providing evidence that they don't have any data.
Open source client.
Looking at the Google Play store, Google's Messenger shares precise location data with third parties, Signal doesn't.
Also on the Google Play store, Google's Messenger app list a lot of data collected. Signal only lists phone number.

[-] poVoq@slrpnk.net 2 points 6 days ago* (last edited 6 days ago)

Well, instead of leaking metadata to Signal, AWS, Cloudflare, Google/Apple and your ISP, like Signal does, RCS only leaks it to your ISP /s

[-] BakedCatboy@lemmy.ml 5 points 1 week ago

I think they mean that it'll take time for everyone to get it. My carrier still doesn't even have RCS at all.

this post was submitted on 27 Mar 2025

526 points (96.8% liked)

Privacy

36445 readers

208 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS