Signal is finally bringing its secure messaging to the masses

Re:Signal is finally bringing its secure messaging to the ma... by Certhas on Saturday February 15, 2020 @09:35AM (#22335514)

Signal is on route to add contact/data recovery:

https://www.signal.org/blog/secure-value-recovery/

... they also cite this as a bottleneck for adding non-phone identifiers. It seems like they are putting the infrastructure in place to fix a lot of the remaining usability issues that people have with them.

[ Parent | on HN ]

Re:Signal is finally bringing its secure messaging to the ma... by gojomo on Saturday February 15, 2020 @03:03PM (#22337585)

'Secure Value Recovery' that will rely on their newfangled, Intel®-SGX-dependent trustworthy cloud key services.

Why do they need me to trust Intel, or novel crypto/software that might be deployed in... when exactly? Why can't they let me just trust the same secure backups that all my other sensitive data/communications are in?

[ Parent | on HN ]

Re:Signal is finally bringing its secure messaging to the ma... by Groxx on Saturday February 15, 2020 @07:42PM (#22339075)

SGX that, as a user, you can't even verify is in use.

I really don't know why they're focusing on things like this. It does nothing to increase evidence-based trust, so it's no better than saying "we added a rate limiter, and delete keys after X attempts" (which I'd be totally fine with, and they could probably put in place in practically no time). Either way you're still relying on them doing what they said they're doing.

[ Parent | on HN ]