How Trail of Bits helps verify the integrity of Signal chats
12 points by dgroshev 8 hours ago | 6 comments
chews 48 minutes ago
I have worked with Trail of Bits before and their cryptography teams are of the toppest of notches, I still have deep skepticism of Signal though. There are safer ways to use it, never getting push notifications is one part of it. I think their work is admirable, but the need for them to bootstrap you with SMS is a gotcha... they have usernames now, but even with those you have to have to bootstrap it with a number/identity.
replyortekk 30 minutes ago
They will allow registering without phone number as a paid option soon.
replyjohnnyApplePRNG 20 minutes ago
Lol how is that any better at all?
replyThen they have your credit card or payment info.
Signal is an obvious honeypot.
They make no money and have no plans to.
They make no money and have no plans to.
I love Signal and it's still my preferred messenger, but if it came out that they're backed by some government agency, I wouldn't be extremely surprised.