How Trail of Bits helps verify the integrity of Signal chats

Discussion (5 Comments)Read Original on HackerNews

chews•about 2 hours ago

I have worked with Trail of Bits before and their cryptography teams are of the toppest of notches, I still have deep skepticism of Signal though. There are safer ways to use it, never getting push notifications is one part of it. I think their work is admirable, but the need for them to bootstrap you with SMS is a gotcha... they have usernames now, but even with those you have to have to bootstrap it with a number/identity.

ortekk•about 2 hours ago

They will allow registering without phone number as a paid option soon.

mmooss•about 1 hour ago

Signal's mission is to provide maximized privacy in a form the non-technical public can use.

A messaging service filled with bots and spammers is not usable, and possibly not affordable to Signal (what proportion of resources would be spent on spam/bots). What is a more private, usable solution for filtering them out than using a phone number?

Lots of security geeks want Signal to adopt practices unusable to the public. They've made clear that unsusable security is not in their mission.

How Trail of Bits helps verify the integrity of Signal chats

⚡ Community Insights

Discussion (5 Comments)Read Original on HackerNews