Comment by TFNA

4 days ago

By "metadata" GP is presumably talking, as I was, about Signal uploading most users' contact lists to the server with weak protection.

The point is that if the comparison point is PGP-encrypted email, which has no protection for any metadata and passes it on the wire in the clear, raising concerns about Signal’s metadata protections makes no sense.

  • In the context of this whole big thread, the point is that neither infamously leaky PGP nor Signal keep metadata secure from nation-level actors.