• 1 Post
  • 50 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle



  • m-p{3}@lemmy.catoPrivacy@lemmy.mlTM Signal
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    1 day ago

    That’s the point of digitally signing the app, to ensure its authenticity and integrity. TM and others wouldn’t be able to resign the modified app with the Signal Foundation signature.

    EDIT: Yeah after thinking more about it it’s not a trivial problem, as you need to assume that the endpoint is inherently untrusted.


  • m-p{3}@lemmy.catoPrivacy@lemmy.mlTM Signal
    link
    fedilink
    arrow-up
    8
    ·
    edit-2
    1 day ago

    At the moment you can’t. The only realistic way I could see that happening is if the servers would check the app’s digital signature and refuse the app from communicating with the official infrastructure if it didn’t match.