this post was submitted on 03 Sep 2022
19 points (80.6% liked)
Security
5186 readers
5 users here now
Confidentiality Integrity Availability
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Whenever someone says "Signal is not good enough", my answer is "what's your threat model"? For me it's a pretty damn good compromise given that all my friends and family are on it (as opposed to e.g. using WhatsApp or Telegram 99% of the time and a perfect alternative with one contact). The day I can realistically think about making my contacts move to a better alternative, I'll do it. In the meantime, that's the best I've got. And it's not too bad, to be fair.
Are you quite certain? Have you looked hard and concluded that Signal is the best alternative available today?
I can tell you that my messenger doesn't use identifiers, it doesn't track me, it doesn't care who my contacts are, it doesn't ask for my email, phone number, and importantly it does everything Signal does.
What's your messenger then?
It is the sole messenger that doesn't use identificators. You cannot get wrong.
No identificators at all? Lol sure, who else is using it with you?
At the moment I think more than 3000 people. Young app. Needs it to spread.
If it needs to spread, don't make a secret of it lol. Briar, SimpleX, something else?
No secrets.
https://simplex.chat/
Oh, yet another messenger that pretends that it's the only one that can prevent MITM. Abusive marketing, or plain misunderstanding of what e2ee means? Anyway I wouldn't trust them just for that.
The code is open. You can check your own doubts.
Not my point. Their webpage says that others (Signal included) are not protected against MITM (in the case of Signal, there is a note saying "if the server is compromised"). Which is plain wrong.
Are you aware that, just to start somewhere, Signal asks (and needs) your phone number to make the service work? If you write "go to hell" to a person and two minutes later you regret it that person can accuse you with absolutely legal evidence in his or her favor. Is everything normal?
First, that's completely unrelated to the very concept of MITM. Second, it also shows that you have no clue about how such protocols work (in Signal, in SimpleX, or anywhere else). I really don't understand why people who are really into secure messengers often don't really care about how they actually work... I mean it is damn interesting!