Signal is a centralized service where:
- You have to trust their servers to run the code they tell you is published on github.
- You give your phone number to create an account and they look for contacts, aliases do not allow you to create an anonymous account.
- The metadata is not private.
- Easily censored by an ISP.
- Its desktop versions are based on chrome and do not encrypt the information, which makes it trivial to extract.
Thanks!
But seems like their contact discovery is private?
Ref: https://signal.org/blog/signal-is-expensive/
Please Login to reply.
The problem is the metadata, it is possible to associate your phone number and other people's numbers to know when you have spoken.