2

I would like to know how paired devices get synced together in Signal messaging app.

So this is what they say on their website

Signal messages, pictures, files, and other contents are stored locally on your device. These contents are readable by the open source Signal clients. Because everything in Signal is end-to-end encrypted, the Signal service does not have access to any of this data.

https://support.signal.org/hc/en-us/articles/360007059412-Signal-and-the-General-Data-Protection-Regulation-GDPR-

But let's say I have 2 devices synced together (phone + pc). The pc is off and I send multiple messages to multiple contacts on my phone. Then I turn off my phone and decide to use signal on pc. How is it possible that signal can sync all messages, pictures etc when my phone is turned off. They claim that everything is stored locally. So in theory, to be able to view my activity on the desktop signal app, the phone has to be connected to internet to sync with it.

Am I missing something ? I'm assuming signal desktop doesn't retrieve everything from all my contacts ..

1
  • The question is not related to security. – mentallurg Mar 25 at 19:44
3

Signal Multi-device Support

Each linked device in multi-device treats each other as a different recipient. Encrypted messages are kept on server until they are received by the recipients. For each linked device, the server holds a queue of 1000 most recent undelivered messages so the device has to come online often enough to prevent overflowing of queue. The server also deletes undelivered messages that are older than 60 days even if the queue is not full.

Linked devices cannot sync chat history in order to prevent compromise of earlier messages that were received before the devices were linked. They start from fresh and their e2ee session is also separate. The only things they have in common is UserId and Identity keypair.

When you send or receive message, the message is replicated by the sender for all of your linked devices. It behaves like group messaging but messages for the linked devices are sent to self.

3
  • When you add a new device to your paired devices, it says something like ' for security issues, only new messages from now on will be displayed here" So I think my question was answered by this "For each linked device, the server holds a queue of 1000 most recent undelivered messages so the device has to come online often enough to prevent overflowing of queue" I'm assuming you know what you're talking about and go with this answer that satisfies me. I wanted to know if they "really" don't store my "encrypted messages" anywhere – gnogno Mar 27 at 14:13
  • @gnogno That's an intended security design to prevent compromise of your earlier received messages. Delivered messages are deleted from the server. Even if the server silently kept encrypted messages, they would not be decipherable by the client because encryption keys of received messages are deleted by the client and they cannot be re-derived. – defalt Mar 27 at 15:43
  • +1 Good edit! I have deleted my earlier comment. – Mike Ounsworth Mar 29 at 14:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.