Especially for the less tech-savvy among us?

  • FauxLiving@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    8 hours ago

    easily extract metadata

    That’s a pretty big claim to make with zero additional information.

    Since 2018, Signal has been encrypting the sender data with a key that isn’t known to the server. Messages do not contain unencrypted metadata. I’m not sure how you expect the FBI to do this with the information available to the Signal servers.

    • EngineerGaming@feddit.nl
      link
      fedilink
      arrow-up
      1
      ·
      11 minutes ago

      I am pretty sure that if asked, the serverside protections can be circumvented - I think in one Github issue they even confessed that Sealed Sender is not bulletproof and is “best effort”. I prefer to assume that if everything goes through a single server, and they know what and when each account does upon connecting - they can correlate the identities if they want to.

      • FauxLiving@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        6 hours ago

        at role does the signal server play?

        If this is a question that you need answered then I’m not sure you’re qualified to declare that Signal is insecure.