missing-root is signal still not encrypting its database? Does this matter? I thought every android app has its own encrypted storage in /storage/emulated/0/android/data/
Signal is encrypting it's database. But the key is available after you unblock your phone. It's more about key availability what differs.
Signal uses an SQLCipher database to store contacts, chat history, and attachments, in the app-specific directory on the device. The database is encrypted with AES 256-bit keys randomly generated the first time the app is run.
The encryption key is wrapped with Android KeyStore and stored in the Shared Preferences. If the KeyStore is unavailable as in Android 5.1 (Lollipop) and previous, the key is written as-is to the Shared Preferences.
In Signal, Shared Preferences are plaintext XML files stored along with the database.
However, Molly protects the Shared Preferences with the user's passphrase, providing full encryption of data at rest regardless of the way Android may or may not be encrypting its own storage.
missing-root in the f-droid repo there only is one molly client, no molly-foss one. Same with Accrescent. Why?
Those are the molly Foss clients.
missing-root I am confused about device pairing. Can Molly + Signal Desktop work? Because there is no "add device" button in Molly for me, so I would need a signal phone
It works with pairing signal desktop and it also supports linking other molly instances.
missing-root why cant you use fingerprint for unlocking the DB?
Only alphanumeric passwords are considered secure. You have the possibility to use a screenlock on top of the encryption which supports fingerprint. It's implementation is superior to what signal does. For example set the timeframe for the BB lock to 6 hours and activate the screenlock. You won't have to type in the password for the db in that 6 hours.
easthvan I am sendign a tiny donation right away, to "signal" the support and to have a truly anonym, secure and audited chat app finall. Besides, I find SimpleX very promising. But not many talks about it...
Thx a lot. We are working towards making molly the most secure communication app available. There are a lot of features on the roadmap that will be a game changer.