Re:Signal is secure, as proven by hackers
by palata on Friday October 07, 2022 @08:21PM
(#33128591)
The whole point of e2ee is that you don't need to know what the server is running, just check the (open source) client.
The point of their private contact discovery is to leverage SGX enclaves so that you can verify what code is running on their server.
Sealed senders allow you to send a message without revealing to the server who you are.
The whole point of Signal is to build something that you don't have to trust. But of course you need to put some effort to understand it (and what it means, e.g. if you don't trust your OS running the client or if you don't trust the SGX enclave).
The point of their private contact discovery is to leverage SGX enclaves so that you can verify what code is running on their server.
Sealed senders allow you to send a message without revealing to the server who you are.
The whole point of Signal is to build something that you don't have to trust. But of course you need to put some effort to understand it (and what it means, e.g. if you don't trust your OS running the client or if you don't trust the SGX enclave).