Signal 2.0 released with private messaging support

Re:Signal 2.0 released with private messaging support by SpaceInvader on Monday March 02, 2015 @04:31PM (#9134466)

Question: how and where message is stored when my phone is off and somebody will send me a message? How it is encrypted and then decrypted on my device once turned on?

[ Parent | on HN ]

Re:Signal 2.0 released with private messaging support by matthewmacleod on Monday March 02, 2015 @05:09PM (#9134680)

It will either be on the remote device, or os Signal's servers, depending on how the implementation works. Either way doesn't really matter; the whole point of encryption like this is to prevent third-party access to your communications.

It could be stored at NSA central for all it matters, and you'd still be the only one able to read the message (using the keys on your device).

[ Parent | on HN ]

Re:Signal 2.0 released with private messaging support by SpaceInvader on Tuesday March 03, 2015 @01:21AM (#9136366)

I know how encryption works. My question was rather design wise. I.e. Which keys are used to encrypt messages on WhisperSystems servers (my public key? Or sender's?). But I'll have a look on the link below describing modified OTR protocol.

[ Parent | on HN ]

Re:Signal 2.0 released with private messaging support by easyd on Monday March 02, 2015 @07:31PM (#9135404)

They are using a modified OTR protocol: https://whispersystems.org/blog/asynchronous-security/

[ Parent | on HN ]

Re:Signal 2.0 released with private messaging support by SpaceInvader on Tuesday March 03, 2015 @04:18AM (#9136818)

Thank you easyd. That was a good read :)

[ Parent | on HN ]