Signal is the world’s most widely used truly private messaging app, and our cryptographic technologies provide extra layers of privacy beyond the Signal app itself. Since launching in 2013, the Signal Protocol—our end-to-end encryption technology—has become the de facto standard for private commu...

We estimate that by 2025, Signal will require approximately $50 million dollars a year to operate—and this is very lean compared to other popular messaging apps that don’t respect your privacy.

  • abhibeckert@beehaw.org
    9·
    1 year ago

    Signal Just Works™️

    Until you drop your phone in the swimming pool, and every message/photo you’ve ever received is just… gone. Forever.

    Sorry but I don’t buy any claim that Signal “just works”. It’s pretty clear they care about security more than anything else even when that means making decisions that are user hostile. And that’s fine - if you feel like you need that level of security I’m glad Signal exists. But it doesn’t really align with the general public and Signal is never going to be a mass market messaging service unless something changes (Signal or the general public).

    What’s weird to me is an app that excludes itself from phone backups considers SMS a valid form of authentication when a user links a device to a phone number - especially when you can necessarily link a device to a number that is already tied to someone else’s device. Like how is that ever going to be secure? Spoiler: it’s not. It’d make a lot more sense to me if users simply crated a username and shared it with other people instead of a phone number… and if they forget their password… come up with new username.

    • slowbyrne@beehaw.orgEnglish
      8·
      1 year ago

      Signal provides a backup option. The auto backup for SMS on android is provided by google and likely uses google drive. I don’t know for certain but I would guess the encryption options and security of that route would be impossible to guarantee and the public backlash of signal users knowing their data was being sent to Google’s servers would be massive.

      I’ve setup my signal backups to a local folder on my phone. I then have SyncThing running on my phone and home computer so it automatically gets sent once it’s created.

      • Alex@feddit.ro
        3·
        1 year ago

        +1 for this. From my tests, SimpleX seems fast, reliable, secure, and private. I haven’t tried daily driving it, though.

        • sqgl@beehaw.org
          3·
          1 year ago

          Downside is minor bugs re inviting friends:

          Gets confused by invites from Facebook (can’t automatically strip the trailing tracking code from the URL).

          Fails scan of QR invite with your maybe camera app. Must scan from app.