Keeping your chats secure is a good idea, but end-to-end encryption is just the beginning of the list of options to consider when picking a messaging app.
But still, to use it, you need a phone number, which in many countries can only be purchased with a passport. That’s the main rule. If privacy is really needed, personal identification should be excluded so that it’s basically impossible to determine who owns the account.
If you want to get really technical, each Signal account actually has a ‘secret’ account number that the phone number is linked to. The phone number requirement is actually a means to reduce spam and scam accounts.
So they could have replaced it with, like, email verification or something, but they instead stuck to the design that lets governments identify all users?
<Insert rampant and unfounded speculation about FBI compromise here>
No, but it’s easy enough to be both. There’s a pile of IM packages out there that manage it.
Metadata is valuable info, look at what a pen register nets law enforcement and why it’s the first step in an investigation. The idea that a messaging app that’s supposed to be used for political action but the chain of association is visible and verified is absolutely suspect.
You say “easy enough” but there are some serious tradeoffs when removing phone numbers from the equation. My mom can use Signal without my help but she wouldn’t be able to use SimpleX.
Signal is a fantastic middle ground messaging app that is secure enough for me to use and easy enough for my mom to use.
I also have SimpleX but I have exactly 1 contact there…
What kind of private communication can we talk about if you must have a valid phone number to use Signal?! Lol
Signal recently implemented “usernames” instead of phone numbers
But still, to use it, you need a phone number, which in many countries can only be purchased with a passport. That’s the main rule. If privacy is really needed, personal identification should be excluded so that it’s basically impossible to determine who owns the account.
Pretty sure you still need a phone number for an account, though - the usernames are just for sharing your contact with other people.
Most peoples’ phone numbers are easily linked to their identity. Which means the government knows who’s using Signal.
Usernames are definitely an improvement, but this is a fundamental limitation in Signal’s design.
If you want to get really technical, each Signal account actually has a ‘secret’ account number that the phone number is linked to. The phone number requirement is actually a means to reduce spam and scam accounts.
So they could have replaced it with, like, email verification or something, but they instead stuck to the design that lets governments identify all users?
<Insert rampant and unfounded speculation about FBI compromise here>
Then I’d delete my old phone number account and start fresh… not exactly the best option but all things considered you might have too
Much better.
Privacy != anonymous
No, but it’s easy enough to be both. There’s a pile of IM packages out there that manage it.
Metadata is valuable info, look at what a pen register nets law enforcement and why it’s the first step in an investigation. The idea that a messaging app that’s supposed to be used for political action but the chain of association is visible and verified is absolutely suspect.
You say “easy enough” but there are some serious tradeoffs when removing phone numbers from the equation. My mom can use Signal without my help but she wouldn’t be able to use SimpleX.
Signal is a fantastic middle ground messaging app that is secure enough for me to use and easy enough for my mom to use.
I also have SimpleX but I have exactly 1 contact there…