Comment by fasterik

1 month ago

>Moxie Marlinspike sounds like some 90s intelligence guy’s understanding of what an appealing name to hacker groups would sound like. Put a guy like that as so-called creator of some encryption protocol for messaging and promote the app like it’s for secret conversations and you think people won’t be suspicious? It screams honeypot like nothing else.

This criticism has absolutely zero substance and honestly just reads like paranoid rambling. The Signal protocol has been independently formally analyzed [1] and has no known security issues.

[1] https://eprint.iacr.org/2016/1013

It's not about the protocol but other sides of the design. Example: https://news.ycombinator.com/item?id=38555810

  • The example you linked is about push notifications in general, nothing specific to the Signal app. If the concern is that your OS is compromised or spying on you, that's not something E2E encryption can protect against, whether it's Signal or any other app.

    • > nothing specific to the Signal app

      The specific part is that Signal forces Google and Apple on its users, and forces the specific kind of push notifications, too.

      9 replies →