202
i've just seen a comment in a post, in this very community, saying people trust signal because of missinformation (from what i could undertand).
if this is true, then i have a few questions:
-what menssaging app should i use for secure communications? i need an app that balances simplicity and security.
-how to explain it to my friends who use signal because i recomended?
-what this means for other apps in general?
i'm concerned that they require phone numbers and host on AWS, and don't have a clear monetization scheme. but for now it seems reasonably secure.
The signal protocol is end-to-end encrypted, not even signal themselves knows what is being sent to what.
https://en.wikipedia.org/wiki/Signal_%28software%29?wprov=sfla1
As I understand it, while they can't see the contents, the Metadata is still exposed.
Isnt the metadata also encrypted?
Your phone number is the biggest metadata you could possibly give (it means your real identity, including your current address), and signal has it.
phone number, IP, time of connection, duration of the chat, size of the encrypted chatlog, etc. might be useful for feds
Yes
~~Signal no longer requires phone numbers.~~ you no longer need to share your phone number to chat at least (sorry)
Not true at all, you still need a phone number to sign up.