▲ -33 ▼ Signal Facing Collapse After CIA Cuts Funding (kitklarenberg.substack.com) submitted 2 years ago by narwhal@lemmy.ml to c/technology@lemmy.world 39 comments fedilink hide all child comments
[–] LWD@lemm.ee 2 points 2 years ago* (last edited 2 years ago) (1 child) deleted permalink fedilink source parent hideshow 2 child comments replies: [–] jet@hackertalks.com 1 point 2 years ago Yeah they had perfect forward secrecy when they forked from signal, and then they tore it out because it was too complex to fit in there model. That's an admission their bad programmers, and we shouldn't trust them with crypto, or nefarious and we shouldn't trust them with crypto. Going back to what's next: Contact Discovery is the major hurdle to adoption of any really secure platform. I do appreciate signals SGX enclaves, they solve the problem in a nice way... If you trust SGX enclaves. That being said, that's not the only way to do it. Though I can't think of many contact discovery mechanisms that don't rely on a central source of truth. Maybe that's the necessary evil for onboarding, but it doesn't have to be part of the day-to-day operations. permalink fedilink source parent
[–] jet@hackertalks.com 1 point 2 years ago Yeah they had perfect forward secrecy when they forked from signal, and then they tore it out because it was too complex to fit in there model. That's an admission their bad programmers, and we shouldn't trust them with crypto, or nefarious and we shouldn't trust them with crypto. Going back to what's next: Contact Discovery is the major hurdle to adoption of any really secure platform. I do appreciate signals SGX enclaves, they solve the problem in a nice way... If you trust SGX enclaves. That being said, that's not the only way to do it. Though I can't think of many contact discovery mechanisms that don't rely on a central source of truth. Maybe that's the necessary evil for onboarding, but it doesn't have to be part of the day-to-day operations. permalink fedilink source parent