News for hackers. Stuff that matters.

A comment on Signal is finally bringing its secure messaging to the masses. Parent comment

Re:Signal is finally bringing its secure messaging to the ma... by gojomo on Saturday February 15, 2020 @03:03PM (#22337585)
'Secure Value Recovery' that will rely on their newfangled, Intel®-SGX-dependent trustworthy cloud key services.

Why do they need me to trust Intel, or novel crypto/software that might be deployed in... when exactly? Why can't they let me just trust the same secure backups that all my other sensitive data/communications are in?

[ Parent | on HN ]
Re:Signal is finally bringing its secure messaging to the ma... by Groxx on Saturday February 15, 2020 @07:42PM (#22339075)
SGX that, as a user, you can't even verify is in use.

I really don't know why they're focusing on things like this. It does nothing to increase evidence-based trust, so it's no better than saying "we added a rate limiter, and delete keys after X attempts" (which I'd be totally fine with, and they could probably put in place in practically no time). Either way you're still relying on them doing what they said they're doing.

[ Parent | on HN ]