Comment by woodruffw
4 days ago
Is what accounting for that? If you're worried about metadata leaks, you shouldn't be using email, full stop.
4 days ago
Is what accounting for that? If you're worried about metadata leaks, you shouldn't be using email, full stop.
By "metadata" GP is presumably talking, as I was, about Signal uploading most users' contact lists to the server with weak protection.
The point is that if the comparison point is PGP-encrypted email, which has no protection for any metadata and passes it on the wire in the clear, raising concerns about Signal’s metadata protections makes no sense.
In the context of this whole big thread, the point is that neither infamously leaky PGP nor Signal keep metadata secure from nation-level actors.