Signal is a centralized service where:

- You have to trust their servers to run the code they tell you is published on github.

- You give your phone number to create an account and they look for contacts, aliases do not allow you to create an anonymous account.

- The metadata is not private.

- Easily censored by an ISP.

- Its desktop versions are based on chrome and do not encrypt the information, which makes it trivial to extract.

Reply to this note

Please Login to reply.

Discussion

Thanks!

But seems like their contact discovery is private?

Ref: https://signal.org/blog/signal-is-expensive/

The problem is the metadata, it is possible to associate your phone number and other people's numbers to know when you have spoken.

Also, regarding metadata, the "sealed sender" functionality in Signal seems to at least remove data on who the sender is (but not recipient)?