News for hackers. Stuff that matters.

A comment on Adding Encrypted Group Calls to Signal. Parent comment

Re:Adding Encrypted Group Calls to Signal by brobinson on Tuesday December 15, 2020 @03:49AM (#25428333)
Threema is not open source yet so I wouldn't use it for that reason. I did like their security whitepaper, though, and they do have some impressive clients (Mercedes-Benz, etc.).
[ Parent | on HN ]
Re:Adding Encrypted Group Calls to Signal by soziawa on Tuesday December 15, 2020 @05:02AM (#25428717)
Additionally they have regular audits [1]. Open source only without any actual thorough reviews doesn't cut it in my opinion.

[1]: https://threema.ch/en/blog/posts/audit-2020-en

[ Parent | on HN ]
Re:Adding Encrypted Group Calls to Signal by viccuad on Tuesday December 15, 2020 @05:17AM (#25428825)
Open source is a precondition. They can promise you the world, but if you can't build it yourself and get reproducible builds, who knows what's in there.
[ Parent | on HN ]
Re:Adding Encrypted Group Calls to Signal by robert_foss on Tuesday December 15, 2020 @05:50AM (#25429032)
Yeah, agree. We've had enough fun recently with the likes of the CIA backed Crypto-AG.
[ Parent | on HN ]
Re:Adding Encrypted Group Calls to Signal by soziawa on Wednesday December 16, 2020 @04:32PM (#25449011)
Sure, but a precondition itself doesn't guarantee anything. You still need to pony up the money for actual aufits.
[ Parent | on HN ]