News for hackers. Stuff that matters.
Re:Signal Foundation by lettergram on Thursday February 22, 2018 @07:11AM (#16436999)
Idk if they realized what they had... They don't even need their own chat client - I implemented an example where I could encrypt and decrypt messages automatically to anyone, over any web based client:

http://lettergram.github.io/AnyCrypt/

(Current version in repo doesn't automatically encrypt, but tests show it's straight forward).

I think that's the real power, the centralized authority of "you are X, with public key Y"

Re:Signal Foundation by fossuser on Thursday February 22, 2018 @03:25PM (#16441061)
They came up with a good solution to the 'key signing party' problem.

Using public social media accounts to help prove identity is a good idea - it's a solution to the main problem that PGP had.

I think Facebook could have done something similar by generating key pairs for all users and then allowing third part access to the public keys (basically a huge public key server). For users that wanted their own private key off of Facebook they could upload their own public key. It's probably better with the keybase model though and using multiple social media accounts.