• suburban_hillbilly
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    2 months ago

    “The database key was never intended to be a secret. At-rest encryption is not something that Signal Desktop is currently trying to provide or has ever claimed to provide,” responded the Signal employee.

    Tl:dr Signal is ‘insecure’ in the same way your mail is ‘insecure’ after you’ve opened it and it’s sitting on your counter. What, you don’t keep you mailed locked up inside you own house just in case someone breaks in?

    • RvTV95XBeo@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 months ago

      I actually manually hash every letter I receive using a rotating cypher kept in a secure vault. Always rough when the letters include images… Had to invest in a storage unit for the pixel-by-pixel encryption of last year’s Christmas cards.