MoonshineMidnight The proof is in the pudding. If I know law enforcement can't get any info, I'm good with the app. Here is Signal's response to a subpoena. Subpoena and Signal's response on the bottom.
Better than Signal?
Bumwin3
I agree with this, it is the most annoying aspect of secure texting, the need for which seems so obvious to us.
My family and I were using Signal and Wickr, until Wickr changed. Then we all migrated to Session, and Signal sort of fell out of use.
There are only two of us with pixel phones, and I am the only one on GrapheneOS. The rest are iPeople, and they have had trouble with sending photos and notifications. One has trouble at work, I suspect due to the antics of her IT people, but we have no idea how or why.
I strongly suspect that were I not the patriarch, they may not have all gone along with any of this. I have four friends on Signal, and one who refuses to use secure texting. There is very little communication with him.
For whatever I may be worth, that is my/our history. We are not wizards or geeks, we just don’t want our correspondence sitting on someone’s server, in the clear, ready to be read at the whim of some “authority”.
I’ve seen how almost any statement, no matter how innocuous, can be interpreted differently, or distorted in meaning, to ever be comfortable with my texts being read by anyone who has the power to ruin my life.
MoonshineMidnight
I have heard rumors that members of the US military are “advised and encouraged” to use Signal for correspondence with their families.
Blastoidea
Well said! I don't know who to quote on this one but "don't let perfection be the enemy of progress". If I can convince someone to learn about PGP Great! If I can get them to use signal awesome! If I can get them to wrap their head around why something like E2EE is important but they're stuck on using whatsapp, that's fine too.
My experience in trying to spread awareness on security & privacy has been that there is nothing wrong with incremental improvements and pushing too much complexity on a newcomer is the best way to drive them straight into the arms of blissful ignorance, which is the worst possible outcome.
Blastoidea The Senate and their staff have been ordered by their chief of security to use Signal - and they already have hardened, more secure government cell phones (I always wonder what they do for that and if it is more secure than GOS. Heck, maybe they use GOS).
- Edited
MoonshineMidnight
Interesting, I hadn’t heard that.
Just remember that a significant number of those folks would cheerfully vote for legislation which forbade you and me from using encrypted communications.
[deleted]
- Edited
AlanZ Hopefully this is will be addressed soon, but you also aren't met by a completely empty contact list. Phone numbers are there for a reason, but good on Threema for making both approaches work, although my contact list is still at zero, just like it was when I first purchased it.
[deleted]
- Edited
People looking at XMPP might be interested to read XMPP: Admin-in-the-middle by now defunct Infosec Handbook and associated HN discussions here and here. It mostly applies to using third party servers, not hosting your own.
MoonshineMidnight
On metadata - see discussion at
https://www.reddit.com/r/fossdroid/comments/12vehzr/comment/jhdb2oe/
and
https://www.reddit.com/r/fossdroid/comments/12vehzr/comment/jhmm0sd/
for references.
zzz
No link able sources, but read about Australia and encryption.
US politicians are no better than Australian politicians, to say the least.
And “our” government is constantly dinging them to “take action” on the “problem” of encryption for the citizenry.
Blastoidea I.e. your government wants to ban encrypted messaging?
supersonic My 0.02 cents. Creator of ,,tinfoil chat'' which is a really secure communicator, has a long reddit history of saying unpleasant things about SimpleX. Sadly i cant say much specyficaly as i was reading this long time ago
Tuba the now-deleted posts he was responding to, you mean?
supersonic not sure, like i said, i read it long time ago
Javcek
Law enforcement never stops trying to gain access to encrypted communications, through lobbying legislators, or any other method they can think up or access.
supersonic That's fine and dandy, but those are threads boosting SimpleX. I read quite a bit of FUD on Signal.