News for hackers. Stuff that matters.
Re:Signal app downloads spike as US protesters seek message ... by nix23 on Friday June 05, 2020 @08:48AM (#23427856)
But with signal you can verify that person, its like the opposite of otr.

https://signal.org/blog/safety-number-updates/

Re:Signal app downloads spike as US protesters seek message ... by cyphar on Friday June 05, 2020 @03:30PM (#23432816)
OTR also allows you to do key verification -- all encrypted chat systems support that. The point isn't that you cannot be sure who you're talking to, the point is that the communication transcript cannot be provided to a third party as evidence that either party in the conversation said something.

This is fairly simply implemented in OTR. Rather than signing the message with an asymmetric keypair (as you would with PGP), you sign it with a HMAC. Thus both the sender and recipient could create a valid message from the sender (giving you the property that only the two people in the conversation can be sure what was actually said by the other party, without being able to prove it to a third party cryptographically).