As Signal get your phone number. Can we considerate this application as private ? What’s your thoughts about it ? I’m also using SimpleX, ElementX, Threema, but not much people using it…

Cheers

  • Dessalines@lemmy.ml
    link
    fedilink
    arrow-up
    3
    ·
    9 hours ago

    It’s a centralized, US-based service running on AWS, that’s not self-hostable, requires phone numbers, and you have no idea what code their server is running.

    Whether the app is you use for it is open source entirely irrelevant for them building social network graphs, considering they have your real identity via phone numbers.

    If the answer is “I just trust them”, then you’re not doing security correctly.

    • MTK@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      2 hours ago

      It is not as good as a decentralized system, and even though the server is open source, it isn’t self hostable (technically in an intranet you could but not easily)

      But the signal foundation is a non profit with external audits and a proven track record with law enforced requesting data and getting basically nothing (If i remember correctly they only have your user to phone number relation and the last time you were online)

      So although it is imperfect, it is an amazing solution that is almost the only 1:1 competitor to whatsapp/messenger/imessage that is privacy respecting, so I am very grateful for it’s existence.

      • TheTux@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        1 hour ago

        100% this, there is matrix, but that was a pain when I used it (this was a few years ago, granted). Signal just works.