Signal-desktop HTML tag injection advisory

Re:Signal-desktop HTML tag injection advisory by sicco on Tuesday May 15, 2018 @12:38PM (#17075243)

A relevant blogpost by Moxie about why the Signal app uses a centralized model (and thus doesn't allow other apps to connect to their servers): https://signal.org/blog/the-ecosystem-is-moving/

Still all code is open source and Signal's code does support federation. Moxie stated before that you can take the code and start a federated version of Signal if you want.

[ Parent | on HN ]

Re:Signal-desktop HTML tag injection advisory by seba_dos1 on Tuesday May 15, 2018 @02:10PM (#17076198)

Of course you can. That won't be Signal though, just an another network using its code, and there's already XMPP, so there's no need for that.

> (and thus doesn't allow other apps to connect to their servers)

"thus"? You can easily use centralized model and allow the client ecosystem to thrive. You don't have to do much, just don't actively prohibit them.

And I know the blog post, it isn't very convincing.

[ Parent | on HN ]