News for hackers. Stuff that matters.
Re:Darpa wants to make a better, more secure, version of Wha... by IshKebab on Monday April 15, 2019 @04:10PM (#19668468)
Signal relies on an authoritative third party to exactly the same extent that WhatsApp does as far as I know.
Re:Darpa wants to make a better, more secure, version of Wha... by chipperyman573 on Monday April 15, 2019 @04:24PM (#19668591)
Isn't signal peer to peer? How can there be an authoritative 3rd party, unless they get rid of all the advantages of using p2p?

I don't know anything about signal, I just assumed it was exclusively p2p based on 30 seconds of googling. But assuming it is all p2p, my above statement should be correct.

Re:Darpa wants to make a better, more secure, version of Wha... by vel0city on Monday April 15, 2019 @04:43PM (#19668736)
Its end to end encrypted and ciphertexts aren't stored long term on Signal's servers, but Signal isn't truly p2p. To send a message a user encrypts the message using the keys for the user, sends them to Signal's servers to be queued, Signal delivers the encrypted message to the receiving user, the receiving user decrypts it. Phone calls would probably be the closest thing to p2p, but it still uses Signal's servers as a broker for connecting the two parties instead of some other form of discovery.

Signal also does not allow for third-party clients to connect to their hosted Signal servers. This further makes them an authoritative 3rd party, as you need to run the code approved by Signal to connect to Signal's servers to send messages to Signal users. Not that I am complaining about this structure, just sharing knowledge.

Re:Darpa wants to make a better, more secure, version of Wha... by chipperyman573 on Monday April 15, 2019 @04:47PM (#19668774)
Interesting, but wouldn't this method would still have its own set unsolvable of problems? For example I don't know if it would be possible to search on the server, since all messages are encrypted.