Comment by nikisweeting

2 years ago

If anyone is curious I highly recommend exploring the desktop app implementation. So many of security guarantees that Signal ostensibly provides are gone in desktop environments where any app you have installed can read ~/Library/Application Support/Signal to and see all your contacts and messages in using the encryption key stored in cleartext in config.json.

https://vmois.dev/query-signal-desktop-messages-sqlite/